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SAFEGUARDING THE SINGLE INTEGRATED OPERATIONAL PLAN (SIQP) 
Reference: MJCS 75-87. 20 May 1967 

1. Purpose . To supplement the reference and to establish 
procedures for the processing and safeguarding of SIOP information 
within the agencies listed in paragraph 3 below, 

2. Cancellation . JAI 2511.81, 3 October 1983. 

3. Applicability . The procedures of this instruction will be 
followed within the Joint Staff. With the concurrence of the 
Office of the Secretary of Defense; Federal Emergency Management 
Agency (FEMA); the Director, Defense Communications Agency (DCA); 
the Director, Defense Intelligence Agency (DIA); the Director, 
Defense Mapping Agency (DMA); the Director, Defense Nuclear Agency 
(DNA); the Director, National Security Agency (NSA); Director, and 
the Chief, Joint Atomic Information Exchange Group (JAIEG) these 
procedures will also be applicable to personnel under the 
jurisdiction of these agencies. 

4. Policy . Executive Order 12356, 2 April 1982, DOD Directive 
5200,1 and DOD Regulation 5200. 1-R provide instructions for the 
DOD Information Security Program. These documents prescribe 
measures for classification, reproduction, accountability, 
safekeeping, storage, dissemination, and transmission of official 
information and include within their scope the documents which 
constitute the SIOP, This directive and the reference provide 
supplemental guidance and apply specifically to that information 
which is designated as SIOP-Extremely Sensitive Information 
(SIOP-ESI) in the reference. 



Respons ibi 1 it les 



a. Each agency listed in paragraph 3 will ensure that the 
provisions o£ this instruction and the reference are 
implemented and followed. Specifically, each agency will 
assure: 

(1) That each person who is authorized access to SIOP-ESI 
is briefed in accordance with subparagraph 8b(8) of the 
Appendix to the reference and executes a briefing 
certificate prior to being granted access, and executes a 
debriefing certificate after removal from an agency master 
access roster. For Joint Staff personnel, JCS Form 59, 
"Security Agreement," will be used, other agencies may 
use their own briefing/debriefing forms. 

(2) That an agency master SIOP-ESI access listing is 
maintained in accordance with subparagraph 8b(9) of the 
reference. Two copies of each agency master roster will 
be forwarded monthly to the Joint Staff, Attn: Security 
Division, DIRM. Rosters should arrive npt later than the 
10th day of the month. JAIEG is requested to provide 
access roster data to DNA. DNA is requested to include 
the JAIEG in its master access roster. 

(3) That a notice of travel and duty restrictions is 
forwarded to the person concerned, the appropriate 
personnel, security, and travel offices in accordance with 
paragraph 9 of the Appendix to the reference. Joint Staff 
elements are to use JCS Form 101 (Sample format contained 
at Enclosures A and B) . THIS NOTICE WILL BE FORWARDED AT 
THE TIME OF ASSIGNMENT TO THE BILLET. The personnel 
office will forward the notice to the parent Service 
personnel distribution control point. 

b. Personnel granted permanent or temporary access to 
SIOP-ESI need no further authorization for access to the 
categories of SIOP-ESI specified; however, holders of SIOP-ESI 
documents must still exercise prudence when releasing SIOP-ESI 
information. 

Information Control Procedures 

a. General ■ The reference states that those portions of the 
SIOP not designated as "SIOP-ESI" are not considered to 
require any special control procedures; thus, normal 
procedures applicable to the degree of classification assigned 
are to be followed for handling those SIOP documents not 
considered "SIOP-ESI." This • instruct ion, accordingly, 
establishes procedures and controls that are applicable only 
to "SIOP-ESI," as defined in the reference. 
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b. Document Control . The following procedures are hereby 
established for control of documents marked 'SIOP-ESI." 
Internal procedures within each applicable agency and Joint 
Staff directorate shall provide for a "continuous receipt" 
system for all SIOP-ESI documents. 

(1) Tapes, reproduced in accordance with subparagraph 
6b(2) of the Appendix to the reference, shall be 
controlled as directed by Nuclear Warfare Status Branch, 

Joint Staff, in collaboration with recipient. 

(2) Messages shall normally be destroyed within 6 MONTHS 

from date of receipt. Copies of messages that are needed 
for longer periods of time shall be placed in the normal 
document control system. 

(3) Working papers shall be controlled by the originator 
in accordance with the procedures for messages specified 
in subparagraph 6b(2) above. ' 

(4) SIOP-ESI documents shall be returned to the. control 
point established in accordance with the foregoing when no 
longer required. 

(5) All SIOP-ESI documents (including working papers and 
messages) to be destroyed shall be listed on certificates 
of destruction forms and destroyed in accordance with 
security regulations and paragraph 18 of the Appendix to 
the reference. Within the Joint Staff, the forms to be 
used are those prescribed in JAI 2511.3 series. Agencies 
outside the Joint Staff may continue to use their own 
administrative procedures for this purpose. Handwritten 
notes and rough drafts should be segregated from other 
classified trash and disposed of in accordance with this 
paragraph in a manner which allows access only by 
authorized personnel. 

c . Marking, Distribution, Transmission, and Transportation of 
Data . The procedures set forth in paragraphs 5, 6, 13, and 14 
of the Appendix to the reference are to be followed in all 
instances. 

d. Reproduction of SIOP-ESI . Copies of SIOP-ESI material 
will be controlled in accordance with the procedures outlined 
above and paragraph 16 of the Appendix to the reference. 
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Personnel Access Control. 



a. General. The Joint Chiefs of Staff consider that 
distribution of and access to SIOP-ESI must be strictly 
limited and based on vigorously justified operational 
requirements or need-to-know. This is especially true for the 
SIOP decision and execution process. Supervisors should use 
mechanical means to preclude access and reduce the nujnber of 
SIOP-ESI billets whenever possible. Examples are: collect 
and lock SIOP-ESI in one safe versus having SIOP-ESI documents 
stored in several locations, hold SIOP-ESI discussions only in 
conference rooms where the audience can be controlled, etc. 

b. Delegation of Authority . In accordance with subparagraph 
8e of the Appendix to the reference, the Director, Joint Staff 
has delegated authority to the Director for Operations (J-3) 
to approve/disapprove requests to establish permanent access 
billets and grant temporary access for military and civilian 
personnel of the agencies listed in paragraph 3 above. 

c. Permanent Access . Requests to establish permanent SIOP 
ESI access billets as outlined in subparagraph 8b(2)(a) of the 
Appendix to the reference should be submitted to the Director 
for Operations (J-3). Requests must contain the categories of 
SIOP-ESI for which access is required and a rigorous 
justification which includes the frequency of anticipated 
access, the intended use of the information obtained, and a 
discussion which explains why the number of billets/persons, 
if any, previously granted access is inadequate. 

d. Temporary Access . Requests for temporary access to 
SIOP-ESI as outlined in subparagraph 8b(2)(b) of the Appendix 
to the reference should be submitted to the Director for 
Operations (J-3). Requests must contain the categories of 
SIOP-ESI for which access is requested and a detailed 
discussion of why and for how long access is required. 
Requests must also include the name(s), SSN, and clearance 
data of personnel for which access is requested. 

e. Contractor Access . Civilian personnel not subject to the 
provisions of the Office of Personnel Management (0PM) or 
Department of Defense personnel policies (e.g. contractor 
personnel) shall not be granted PERMANENT ACCESS to SIOP-ESI 
information. Personnel in this category will be authorized 
TEMPORARY ACCESS ONLY. Requests for contractor access should 
be submitted to the Director for Operations (J-3). Requests 
must contain the name of the contractor, name(s), SSN, 
categories of SIOP-ESI for which access is required, and a 
detailed discussion of why and for how long access will be 
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required. Requests for initial temporary access will be 
approved by the Director, Joint Sta£f . Requests to extend the 

initial period of temporary access may be approved by the 
Director for Operations or his designee. 

f. Waiver of SBI Recfuirement . In accordance with 
subparagraphs 8b(5)(b) and 8c of the Appendix to the 
reference, the Deputy Director, National Military Command 
System is authorized to waive the SBI requirement for 
personnel assigned to the organizations listed in paragraph 3 
above. Requests for waivers should be submitted to the 
Director for Operations (J-3), Attention; Strategic 
Operations Division. The request for waiver should contain a 
detailed discussion of why the waiver is necessary as well as 
a certification that the individual qualifies for a waiver as 
outlined in subparagraph 8b(5)(b> of the Appendix to the 
reference. 

g. Access for Personnel Designated to Relocate to the 
National Military Command Center (NMCC), Alternate National 
Military Command Center (ANMCC), and National Emergency 
Aitborne Command Post (NEACP) . Access for personnel assigned 
to relocate under EMERGENCY relocation procedures will be 
granted as follows: 

(1) Relocation rosters shall be submitted to the NMCC and 
to the carious alternates via the Security Division, DIRM, 
Joint Staff which will annotate and sign such rosters as 
follows : 

(a) "The personnel listed above meet the criteria 
for access to SIOP-ESI data as prescribed in MJCS 
75-87 and are to be automatically added to their 
Master Agency SIOP~ESI Access Roster when EMERGENCY 
relocation is directed." 

(b) Any person on such lists who do not meet the 
criteria for access shall be listed as "Exceptions." 

(2) Due to the nature and purpose of the EMERGENCY 
relocation roster, it is more than probable that a 
briefing certificate will not be completed on individuals 
when EMERGENCY relocation is directed. Therefore, a 
debriefing certificate will be administered by the 
appropriate directorate or agency security organization at 
such time as the EMERGENCY no longer exists and the 
relocatees have returned to the parent organizations. 
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8. Access for Personnel Designated to Participate in EXERCISES 

a SIOP-ESI access is not normally required for personnel 
designated to participate in EXERCISES. If it is determined 
that exercise participants, including Planning Group member 
and Evaluation Group members, will be required to have access 
to SIOP-ESI, requests for such access will be processed in 
accordance with the procedures prescribed in paragraph 7d 
above . 

b The procedures of this section will not apply to personnel 
who have been granted permanent access to SIOP-ESI by reason 
of occupying a permanent SIOP-ESI billet as defined in 
subparagraph 7c above unless the categories of access required 
on a temporary basis will exceed the permanent authorization. 

c. Exercise temporary access rosters shall be submitted to 
the NMCC and to the various alternates via the Security 
Division, DIRM, Joint Staff. Personnel listed on such 
rosters must be briefed and debriefed as outlined in 
subparagraph 8b(8) of the Appendix to the reference. 

9 Requests for SIOP documents shall be handled in accordance 
with paragraph 6 of the Appendix to the reference. 

10 Visits Requiring Access to SIOP Information, SIOP Brie fings, 
and Vi¥its~tQ Joint Strategic Targ et Planning Staff (JSTPSj 

a Visits involving SIOP-ESI information and requests for 
SIOP briefings will be handled in accordance with paragraphs 
10 and 11, respectively, of the Appendix to the reference. 

b Visits to the JSTPS will be approved by the Chairman, 
Joint Chiefs of Staff, or other Joint Staff authority, as 
appropriate, to minimize the interference with SIOP 
devGloDment and unwarranted dissemination of SIOP 
information. All requests for visits to JSTPS, except those 
from individuals directly involved in SIOP development, 
support, and implementation— see table below, will be 
forwarded to the Director for Operations, Joint Staff, a 
minimum of seven working days prior to the proposed visit for 
a Se?^mination of the proper approval authority. The reason 
for the requests, identity of the visitors, and the 
briefings/discussions requested will be considered in 
determining the approval authority. Approval/disapproval 
authority for visits to JSTPS is as follows: 
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SOURCE OF REQUEST 

Civilian Personnel from White House, 
Senate or House of Representatives 

Foreign Personnel other than NATO 

Foreign Members of NATO 

Individuals from the Joint Staff, 
Services, CINCs, DIA, DMA, or DNA 
who are directly involved with SIOP 
development, support, or implementation 

Services, Agencies subject to JAI (See 
paragraph 3), and all others 



approv al/d i sapproval 
authority! 



CJCS 

JCS 
DJS 
DSTP 



J-3 



^JCS or other authorities are consulted as* appropriate. 

c. JSTPS will provide the Director for Operations with 
informational copies of any messages or documents which may 
result from approvals/disapprovals processed at JSTPS. 

11. Actions in Case of possible or actual compromise shall be 
handled in accordance with paragraph 15 of the Appendix to the 
reference. 

12. SIOP-ESI Access Categories are defined in Annex A of the 
Appendix to the reference. 



MICHAEL R. DAVENPORT 
Colonel, USAF 
Director, Information 
and Resource Management 



Attachments 

Enclosure A, JCS Form 101 

Enclosure B, Sample Format for Recommendations Pertaining to 
Travel and Duty Restrictions 



SUMMARY OF CHANGES. Administrative update. 
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ENCLOSURE A 



TRAVEL AND DUTY RESTRICTIONS 



Name 



Rank/Grade 



SSAN 



Subject individual is assigned to permanent SIOP-ESI access billet 

In accordance with MJCS 75-87 

As a result of this access authorization, the individual will have broad or 
detailed knowledge and continuing access to SIOP-ESI information. 
Therefore, he/she is restricted from official of unofficial travel to the coun- 
tries listed in l je Tab to Annex E of MJCS 75-87, while assigned to the Joint 
Staff unless the restriction is waived by the Director for Operations, the 
Joint Staff. 



Subject individual is restricted from travel to and duty assignment in the 

countries listed in the Tab to Annex E of MJCS 75-87 for 

year(s) commencing with the date he/she is detached from the Joint Staff. 
This restriction may be waived by the Director for Operations* the Joint 

Staff. 



Military Secretary/ Executive Officer 



Signature 



JCS Form 101 
APR 89 



IW) COPY 1 ■ Pars Div. J-1 

(Y) COPY 2 - Security Div. DIRM 

(P) COPY 3 - Travel Sec. Services Div. DIRM 

(Q) COPY 4 - Individual's Copy 



Enclosure A 
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THE JOINT STAFF 
WASMINOTON. O.C. ^^'^f^ • , Voo\ 

20 April 1989 

ENCLOSURE B 

SAMPLE FORMAT FOR NOTICE OF TRAVEL AND DUTY RESTRICTIONS 
MEMORANDUM FOR DISTRIBUTION 

Subject: Travel and Duty Restriction Regarding 



(Rank/Grade, Name, Social Security Number) 

1. is assigned to 

(Rank/grade, name, SSN) 

permanent SIOP-ESI access billet in 

accordance with reference*. 

2. As a result of this access authorization, he/she will have 
broad or detailed knowledge and continuing access to SIOP-ESI 
information. Therefore, he/she is restricted from official and 
unofficial travel to the countries listed in the Tab to Annex E of 
the reference while assigned to unless the 

(Agency) 

restriction is waived by the Director for Operations r Joint Staff. 

3. Furthermore, is restricted from travel 

(Name) 

to and duty in the countries listed in the Tab to Annex E of the 

reference for year(s) commencing with the date he/she 

is detached from . This restriction may be waived 

(Agency) 

by the Director for Operations, Joint Staff. 



(Authorized Signature) 

Reference 
» MJCS 75-87, dated 20 May 1987 

Distribution s 
J-1. PSD 

DIRM, Security Division vj 
DIRM, Services Division 
Individual concerned 



Enclosure B 
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SAFEGUARDING THE SINGLE 
INTEGRATED OPERATIONAL PLAN (U) 




THE JOINT CHIEFS OF STAFF 
WASHINGTON. D.C. 20301 



MJCS 75-87 



CLASSIRED BY DIRECTOR, J-3 

DECLASSIFY ON OADR 




pdc Di'i/ 




THE JOINT CHIEFS OF STAFF 

WASHING10N. D C. 20301-5000 



MJCr. 75-87 
20 M.ay 10R7 



MEMORANDUM FOR; DISTRIBUTION LIST 

subject: Safeguarding the Single Integrated Operational Plan 

1. The Appendix contains the policy of the Joint Chiefs of Staff 
with regard to security of the Single Integrated Operational Plan 
(SIOP), the basic administrative and handling requirements, and 
the emphasis that must be placed on control of SIOP-Extremely 
Sensitive information (SIOP-ESI). 

2. This memorandum supersedes SM-313-83, 10 May 1^83,^^ 
"Safeguarding the Single Integrated operational Plan. 

3. Without enclosure, this memorandum is UNCLASSIFIED. 



For the Joint Chiefs of Staff: 



RICHARD A. BURPEE 
Lieutenant General, USAF 
Director for Operations 



Enclosure 



SEGREf- 



DISTRIBUTION 



No. of Copies 
13* 

Secretary of Defense 

Director of Central Intelligence ^ 

Chairman, Joint Chiefs of Staff ^ 

Chief of Staff, US Army ^ 

4 

Chief of Naval Operations 

Chief ol Staff, US Air Force ^ 

Commandant of the Marine Corps ^ 

Commander in Chief, US Space Command 5 

Commander in Chief, US Atlantic Command 4 



Include r"copieB for distribution to the following: 

Assistant to the President for National Security ^ 

Affairs ; , 

Director, White House military Office * 

Director, Federal Emergency Management Agency i 

Director, US Secret Service, Department of the ^ 

Treasury ; , 

Deputy Under Secretary of Defense for Policy ^ 

Director, Emergency Planning, Office of tne Deputy 

Under Secretary of Defense for Policy. i 

Director, Information Security, Office of the Deputy 

Under Secretary of Defense for Policy --^ 
Director, Security Plans and Programs, Office of the 

Deputy Under Secretary of Defense for Policy....- 

Deputy Assistant Secretary of Defense (Comptroller) ^ 

(Administration) • • • ; 

Director for Industrial Security ClBarance Review, ^ 

General Counsel ; • ^ 

Director, Washington Headquarters Services ^ 



No. of Copies 

Commander in CUief, US Central Command.. ; 2 

. , „ 2 

US commander in Chief > Europe 

commander in Chief, Military Airlift Command 2 

commander in Chief, US Pacific Command' ^ 

commander in Chief, US Readiness Command ^ 

Commander in Chief, US Southern Command 5 

commander in Chief, Strategic Air Command 5 

Director of Strateyic Target Planning • 

US Representative to the Military Committee, NATO 1 

... .4 

Director, Defense Communications Agency...... 

Director, Defense Intelligence Agency 

Director, Defense Investigative Service ^ 

Director, Defense Logistics Agency ^ 

9 

Director, Defense Mapping Agency 

3 

Director, Defense Nuclear Agency 

Director, National Security Agency/Chief, Central 

. 1 

Security Service {P-391) 

L 

Director, Joint Staff 

Director for Manpower and Personnel, Joint Staff ^ 

. , . , .13 

Director for Operations, Joint Staft 

Director for Logistics, Joint Staff ^ 



No. of Copies 

Director for Strategic Plans and Policy, Joint 

/ 3 

Staff • 

Director for Command, Control, and Communications 

3 

Systems, Joint Staff 

US National Military Representative, SHAPE 1 

commander. Joint Special Operations Command 1 

Director, Force Structure. Resources, and 

4 

Assessment 

Director for Information and Resource Management, OJCS 7 

Chief, Alternate National Military Command Center 2 

,1 

commander. Joint Coordination Center 

Chief . National Emergency Airborne Command Post 4 

Chief, Joint Atomic Information Exchange Group ^ 

14 

Secretary. Joint Chiefs of Staff 
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SECRET ■ 

APPENDIX 

SAFEGUARDING THE SINGLE INTEGRATED OPERATIONAL PLAN (U) ' 
i. (U) General 

a. (U) The guidance herein sets forth the policy of the 
Joint Chiefs of Staff with regard to security of the 
Single Integrated operational Plan (SIOP). This directive 

is intended to: 

(1) (U) Emphasize the need for strict observance of 
basic security regulations in safeguarding the SIOP. 

(2) (U) Emphasise that stringent cpntrol must be 
exercised over SIOP-Extrenely Sensitive information 
(SIOP-ESI), as defined below. 

(3) (U) provide the basic policy for the identification 
of SIOP-ESI. 

(4) (U) Set forth specific security controls and 
procedures to ensure that distribution of and access to 
SIOP-ESI are authorized with utmost discrimination in 
all cases. 

b. (U) Executive order 12356, DOD 5200.1 and DOD 5200.1-R 
provide- instructions for the OOD Information Security 
Program. These documents prescribe measures for 

CLASSIFIED DIRECTOR, J-3 
DECLASSIFY ON OADR 
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Appendix 



classification, reproduction, accountability, safekeeping, 
storage, dissemination, and transmission of official 
information and include within their scope the documents 
that constitute, the SIOP. This directive is supplemental 
to tlie preceding directives and applies more specifically 
to SIOP-ESI, as described herein. 

c. (U) The Joint Chiefs of Staff consider the information 
described in subparagraph 3b and paragraph 4 to be an 
extremely high-level enemy intelligence collection target. 
Its disclosure to unauthorized person's could clearly 
result in serious degradation of the effectiveness of the 
SIOP and therefore, should be designated SIOP-ESI. The 
Joint Chiefs of Staff consider that distribution of and 
access to SIOP-ESI must be strictly limited and based on 
rigorously justified operational requirements or need to 
know and must be protected under the special access 
provisions set forth below. 

d. (U) DOD 5200. 1-R requires all Special Access Programs 
m the Department of Defense to be reviewed every 5 years 
to determine continued necessity. The next review. of the 
SIOP-BSl special Access Program will be accomplished in 
June 1989. 
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2. (U) References . Documents referenced in this directive ^ 
are listed in Annex F. 2^ 

3. (U) Definitions 2 
a. (u) SIOf> Materials . Any recorded information, £ 
regardless o£ its physical form or characteristics, that 5 
is part of the JCS SIOP or is derived from or published in g 
support of the SIOP and may be represented in any of the ^ 

following forms: 2. 

(1) (u) Written material, whether printed, typed, or 9 

handwritten. , 19. 

(2) (U) Painted or drawn material. II 
(J) (U) Electronic or magnetic recording, punchcards. 

or paper tape. 12 

(4) (U) Sound recordings. I£ 

(5) (U) Photographs. il 

(6) (U) Reproductions of the foregoing by whatever 16 

17 

process . tl. 

(7) (u) Materials used in reproduction of the foregoing ig 
(e.g., typewriter ribbons, copying machine belts, etc.) 19 

b. (U) SIOP-ESI . Detailed TOP SECRET information and 20 

material of such an extremely sensitive nature that its 2I 

22 



-"SliCRET 
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co»pro»ise would seriously degrade the eefectiv.ness of 
the SIOP. Paragraph 4 below discusses specific Kinds of 
information that are considered to be SIOP-ESI. 
^. (u, ..r.^ SIOP Documents . The JCS SIOP (Basic) and 

^ A bB thereto, and associated 
annexes, appendices, and tabs tnere.. 

source data, 

a (U) .T.int Strate>3i r T.ra.t Planning Staff SIOP 
Oocu.ents .. Documents published by the Joint Strategic 
Target Planning Staff (JSTPS) in support of tne JCS SIOP 
e. (U) STOP Briefings . Any briefing that includes 
detailed extracts of SIOP information derived from 
material described as SIOP material in subparagraphs 3a 
through 3d above and paragraph 4 below. 
4. (u) Identificat ion of SlOP-fiSI 
a. (/) 



(1) (/) 
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(2) (/) 



C3) (/) 



1 

2 
3 
£ 

£ 
7^ 
8 

9 

10 
11 
12 
13 

i 14 

iil 

i 

■ il 

i ii 

I 

I 19 
I """" 

I 22. 

! — 
21 

22 
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(4) (sO 



(5) 



(S) 



r7u) The following acs and JSTPS dooa«ent». becaus. the 
Xevel/a-ount of detail -eets the criteria of : subparagraph 
4a a^ve. are considered to be eatre.ely sensitive and are 



1 

2 
3 
4 
5 
6 

7 ' -V 

8 

9 

i£ 
u 

12 
13 

ii 
15 

il 
17 
18' 
19 
20 
21 
22 
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• designated, in their entirety, as SIOP-ESI documents. i 

(1) (0) JSTPS ACfcS consequences of Execution with Tabs ^ 
and SRP Damage Analysis. 3. 

(2) (U) Appendix III to SlOP Annex E (Coordinating 4 

Instructions). 5 

(3) (U) SIOP Annex F (Strike Assignments and Force ^ 
Timing) and Appendices I, II, HI* IV, and V thereto. ^ 

(4) (U) JCS SIOP summary, SIOP Annex F (Strike g 
Assignments and Force Timing). 9 

(5) (U) JCS SIOP Decision Han.lDook (Black Book). lo 

(6) (U) JCS Emergency Action Procedures, Volumes XI and ^ 

IV. ii 

(7) (U) SIOP Revision Reports. 13^ 

(8) (U) consolidated SIOP Analysis Document. i4 
MOTEj Information extracted from these or any SIOP- 15 

ESI document is considered to De SIOP-ESI until ^ 

such time as it has been reviewed by an 17 

individual who has been designated as an 18 

original TOP SECHI2T class i L icat ion authority in x9 
accordance with DOD 5200. i-R and determined not 20 
to meet the criteria for SIOP-ESI stated in 2I 
subparagraph 3b above. 22^ 



^GCRliT 
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c. (U) Reconnaissance 



data are not SIOP-ESI 



d. 



e. (U) Agenc 



ies responsible for SIOP wargaming and 



SEGftfig- 
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exercises will consider the following: 
(1) (/I 



(2) (U) The JSTPS and J-8 SIOP -ar ^a»e reports -ill be 
classified TOF seCRET and .arKed SIOP-ESI Category XX 
-.en tney include infor^tion described in sut>para9raph 



.SM.81.77. 1 F.b 77. "Basic Policy Guidance on «argao.in, (0)" 21 
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4a above. Upon completion, war game reports involving 
the SIOP will be submitted to the Joint Chiefs of Staff 
for review and approval. An integral part of the 
approval procedures for such reports will be the review 
and approval of the classification assigned by the 
originator. Reports can be released in accordance with 
the provisions of JCS MOP 39, subparagraph 2a(2) as JCS 
papers or paragraph 6 of this directive as appropriate. 
(3) (U) The use of SIOP-ESI data in the play of command 
post exercises and other war plan exercises is not 
authorised without the approval of the Director, Joint 
Staff. The Director for Operations, Joint Staff, shall 
review such requests and submit recommendations to the 
Director, Joint Staff, for approval, 
f . (U) The listing delineated by subparagraphs 4a through 
4e above is not to be construed as limiting or all 
inclusive, nor will the listing be maintained in a current 
status by changes to this directive. 
5, (u) Security Classification and Marking 

a. (U) Ail SIOP documents shall be classified and marked 
in accordance with DOD 5200. 1-R. Documents containing 



OEGRET 
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SEGftC T 

SIOP-ESX, as defined and described in paragraphs 3 and 4 
above, shall bear additional markings, as prescribed 
herein. 

b. (U) SIOP-ESI documents shall be classified TOP SECRET 
only. In order to permit immediate and positive identifi- 
cation of these documents, the indicator "SIOP-ESI 
Category XX" (i.e., 01-10) shall be prominently affixed to 
the front and back cover. This indicator shall also be 
applied to compilations of documents which, although not 
SIOP-ESI individually, may, in the aggregate, be so 
considered. 

c. (U) Correspondence, reports, studies, messages, and any 
other media relaying SIOP-ESI shall include the following 
statement: 

"This (correspondence, memorandum, report, etc.) 
contains SIOP-ESI Category XX data. Access lists 
govern internal distribution.** 

d. (U) Messages containing SIOP-ESI shall include the 
designator "SPECAT** and the indicator "SIOP-ESI Category 
XX** with the Category number spelled out, for example 
"SPLCAT SXOP-ESI CATEGORY ONE,** at tne beginning of the 
message text immediately. following the message 

3EG « CT ^ Appendix 



Classification, in accordance with ACP 121 US Sx^pp-l 
(series), followed by the statement in subparagraph 5c 
above, supporting telecommunications centers will 
distribute SIOP-ESI messages based on the SIOP-ESI 
category number and access/distribution lists provided by 
recipients of SIOP-ESI message traffic, 
"e. (/) 



* MJCS-273.83, 23 December 1983, "Guidance for t>je Sanitiza- 
tion and Distribution of SIOP Information to SACEUR and 



SACLANT* 
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, („, The SIOP-ESX indicator HOT a saparat. .ecucity 
cX.ssifi=atio„. TUis indicator is intenacd sole.y as a 

^ . ^ ^^ntifving slOP-extremely sensitive 
mecUanism for identitying o^v/ 

i„,or.ation tnat «ust ^ controUea In accordance wxt. the 
special acc... .rocea-re. ..tabU.».ed .y t.is directive, 
care «ust ^ taX.n to that th. SIOP-B«I indicator 

i. applied to documents only -hen the content, contaxn 
information of the type and quantity set forth In 

Tni^iscrininate use of the SIOP- 
paragraphs 3 and 4 above. IndiscrlBina 

«SX indicator wiU result in unnecessary addition, to 
acce.. rosters and undue restrictions on procescin. of 
documents. «hicn could ulti.ately result in lessened 
security. 

oxceot those sanitised and 
g (U) SIOP documents, except t"w=» 

authorized for release to HATO under the previsions of 
„aCS-273.83 Shall .e labeled "Not Releasable to »on-US 
agencies Without Per-i..ion of the originator." 
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6. (u) Distribution of SIOP Material and Extracts ^ 

a. (U) The Director for Operations, Joint Staff, OJCS, ^ 

will review the requirements of all users of the JCS SIOP ^ 

prior to the publication of each SIOP and report ^ 

recommended distribution lists will be included in the ^ 

promulgating directives for each SIOP. g 

(1) (U) Requests to change approved distribution lists ^ 

will be submitted, with justification, to the Director ^ 

for Operations, Joint Staff, OJCS. The Director for ^ 

operations. Joint Staff, will forward his consideration ^ 

and recommendations to the Director, Joint Statf, who ^ 

is authorized to approve/disapprove such requests. The ^ 

Director of Strategic Target Planning (DSTP) will be ^ 

notified of approved changes. 1£ 

(2) (U) Requests to change the number of copies ^ 

provided by approved distribution lists will be ^ 

submitted, with justification, to the DSTP. After ^ 

informal coordination with the Director for Operations, ^ 

Joint Staff, DSTP is authorized to approve/disapprove ^ 

such requests. 20^ 
b. (U) The DSTP Is authorized to make distribution of JCS 

SIOP materials for each major revision or update to the 22 
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SIOP under the provisions of subparagraph 6a above, with 
the following stipulations: 

(1) (U) Unless an exception is stated in the approved 
distribution lists, as provided in subparagraph 6a 
above, or amended under the provisions of subparagraph 
6a(l) or 6a (2) above, JCS SIOP materials distributed by 
the DSTP will contain only those data necessary for the 
accomplishment of the assigned tasks, missions, and 
responsibilities of the addressee. 

(2) (U) SlOP-fiSI magnetic tapes will be distributed to 
users within the Washington, D.C., area as follows; 

(a) (U) The DSTP will forward one copy of each 
required tape to The Joint Chiefs of Staff, 
Attention: J-3 .Nuclear Warfare Status Branch 
(NWSB), and one copy to the Joint Coordination 
center (JCC),.Fort Ritchie, Maryland. 

(b) (U) The Director for Operations, Joint Staff, 
will reproduce tapes, as required, to satisfy the 
approved requirements of users in the Washington, 
D.C., area. The JCC will, use its copy of tapes, 
provided to support JCS requirements delineated in 
JCS Pub 6, Volume II, Part 1. 



1 
2 
3 
4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 
18 
19 
20 
21 
22 



15 



Appendix 



t 



ODCRET - 

(c) (U) Requests by approved users for reproduced ^ 

tapes or portions or printouts thereof will be ^ 

submitted to the Director for Operations, Joint 3 

Staff, who is authorized to approve/disapprove such ^ 

requests . 5^ 

c. (U) The DSTP is authorized to make distribution of ^ 

JSTPS SIOP materials as follows: 7 

(1) (U) All JSTPS SIOP material to; 8 

(a) (U) The Chief of Staff, US Army; the Chief of 5 
Naval operations; the Chief of Staff, US Air Force; ^ 
and the Commandant of the Marinb Corps- xi 

(b) (U) OJCS. 12 

(c) (U) Commands designated by the Joint Chiefs of 

Staff. ii 

(2) (U) Distribution of JSTPS SIOP materials to the 3^ 
commands or agencies not covered in subparagraphs 6a ^ 
through 6c(l) will be considered on a case-by-case ^ 
basis. Requests will be submitted to the DSTP with ^ 
sufficient justification to complete an appraisal. The ^ 
DSTP may approve such requests as are considered 20 
necessary for effective operations. Requests not 2I 

22 



16 



Appendix 



ri'f in If 'I' " 

favorably considered by the DSTP will be forwarded to ^ 

the Director for operations, Joint Staff, for review ^ 

and action. 3^ 

d. (U) Requests for copies of changes to the distribution ^ 
schedule for the SIOP publication, "JSTPS Air Defenses ^ 
Handbook," will be forwarded to tne DIA Dissemination ^ 

Center. 7^ 

e. (U) The Chairman, Joint Chiefs of Staff, consulting the ^ 
other Joint Chiefs of Staff, as appropriate, will approve/ ^ 
disapprove requests for SIOP documents from the White ^ 
House and members of the Senate and House of ^ 
Representatives. 12^ 
t. (0) Requests for release of SIOP documents to foreign ^ 
nationals will be submitted to the Director for ^4 
operations. Joint Staff, for review and recommendations to ^^5 
the Joint Chiefs of Staff, except as noted below. ^ 

(1) (U) The DSTP is authorized, in coordination with ^ 

the SACEUR Senior Representative (SACEUR Rep) to the ^ 

JSTPS, to disclose US classified information, relative ^ 

to current and subsequent SIOPs, to SACEUR and the jO 

SACEUR Rep to JSTPS, pursuant to, and in accordance 2I 

22 
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with, the policies contained ih NDP-1* and JAIEG Case 
11-15/75F.** 

(2) (U) Similarly and in accordance with the same 
policies, the DSTP is authorized to disclose such SIOP 
information to SACLAMT as is essential for adequate 
understanding and effective coordination of nuclear 
forces planning. 

(3) (U) Procedures for handling OS SIOP information 
within HATO is contained in Annex B to Attachment 1 of 
USSAN instruction 1-69 (DOD 5700.55, End 2). "United 
States implementation of NATO Secur'ity Procedures {U)» 

g. (U) Recipients of SIOP documents are authorised to 
extract and reproduce portions thereof for such use or 
dissemination to lower echelons as may be required for 
accomplishment of assigned tasks, missions, and 
responsibilities. Reproduction of SIOP document e:ftracts 



* MDP-l 9 Sep 81, "National Policy and Procedures for the 
Disclosure of classified Military Information to Foreign 
oiveinments and international Organisations (National Dis- 

Closure Policy)" 
** Joint Atomic Information Exchange Group (JAIEG) memorandum 
JA EG case N-15/75F, 10 Dec 75, "Authorization and Release 
procedures for SIOP ATOMAL Information to NATO (U) 
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shall, in every case, be on a rigiaiy discriminating basis 

and shall be controlled in accordance with applicable ^ 

directives, including this directive. 3 

h. (U) special procedures for processing extracts from ^ 

SIOP-ESI documents are as follows: 5 

(1) (U) Release of SIOP data to foreign nationals is ^ 
prohibited, except as authorized under the NATO ^ 
Documents Program and as approved by the Joint Chiefs ^ 
of Staff. The release of SIOP-ESI data to 9 
SACEUR/SACLANT is discussed in subparagraph 6f above. ^ 

(2) (U) When extracts are made from SIOP^ESI material ^ 
or when portions of SIOP-ESI material are reproduced, ^ 
meticulous consideration shall be given to the deter- 
mination of appropriate classification and 14 
identification. It is of particular importance to 
determine whether or not such extracts, or portions ^ 
reproduced, retain characteristics of the type and ^ 
quantity delineated in paragraphs 3 and 4 above and ^ 
should be identified as SIOP-ESI. 19 

i. (U) Requests for JCS SIOP documents not covered by 20 
subparagraphs 6a 'through 6h above will be submitted, with 

justification, to the Director for Operations, Joint 22 
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staff, who will forward the requests and his i 

recommendations to the Director. Joint Staff. The 2 

Director, Joint Staff, consulting the Chairman, Joint 3 

Chief, of Staff, as appropriate, will approve/disapprove 4 

these requests. h 

j. (U) Recipients of JCS or JSTPS SIOP documenta/mater ials g 

will check the documents/materials for completeness and 7 

will return all receipts within 72 hoars of receipt. g 

reporting immediately any discrepancies noted to 9 

recipient's parent command. Parent commands will inform 10 

the originating -agency within 24 hour4 after being u 

notified in the event the discrepancy(ies) cannot be • 12 

resolved. — 

7. (U) inventory and sighting ii 

a. (U) All SIOP materials defined and identified in 15 
paragraphs 3 and 4 above will be inventoried annually, as 16 
a minimum, or more frequently, as prescribed by the 17 
classified material control procedures of the appropriate is 
service, joint agency, or command, except as specifically 19 
provided in subparagraph 7b below. 20 

b. (U) SIOP .documents that are effective for a single SIOP 21 
revision cycle or less will be controlled by document 22 
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receipt/certificate of destruction procedures in i 

accordance with applicable Service and joint agency 2 

security directives. These documents shall be destroyed 3 

within 30 days of supersession. Certificates of 4 

destruction shall be maintained as directed by the 5 

security directives of the appropriate Service, joint g 

agency, or unified and specified command. Command 7 

internal inspection procedures will be established to g 

ensure rigid adherence to those procedures. 9 

c. (U) The DSTP and other originating agencies shall 10 

annually, as of 30 September, provide holders a list of u 

documents as follows: IL 

(1) (U) The basic STOP and major collections of its 13 
annexes (i.e., annexes and appendices maintained at 14 
Service, joint agency, and unified and. specified 15 

command level). — 

(2) (U) All documents not covered in subparagraph 7c (1) 17 

above that contain SXOP-ESI. ii 

Documents controlled in accordance with subparagraph 7b 19 

above will be exempt from this requirement. 20 

d. (U) upon receipt of this listing, holders shall verify 21 

the listing, sight listed documents, and certify the 22 



21 



Appendix 



SECRET " 

sighting to the originator, who in turn will forward a ^ 

consolidated sighting report o£ each such annual sighting j 

to the secretary, Joint Chiefs of Staff. Discrepancies, 3 

if any, ahall be handled separately in accordance with ^ 

paragraph 16 below and reported to the Director, Joint 5 

Staff. 1 
e. (U) To facilitate this inventory and sighting and to 

provide the maximum security, holders of SIOP-ESI material g 

should provide for central control of such documents. 9 

8. (U) Access Control Ifi. 

a. (U) Control of Access to Non^ESI s foP Information. 11 
Access to SIOP information not identified as SIOP-ESI will ^ 
be controlled in accordance with standard security 13 
procedures governing access to classified information. It ^4 
is not considered necessary to establish any special 15 
controls over access to these data. 1£ 

b. (u) Control of Access to SIOP-ESI Information . Access ^7 
to SIOP information designated SIOP-ESI shall be subject le 
to special control procedures. Services, joint agencies, 19 
and commands holding or authorized to hold SIOP-ESI data 20 
are requested to provide implementing instructions for the 2I 
special control procedures outlined below. 22 
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(1) (U) Access to SIOP-ESI shall be highly restricted 
and granted on a selective and discriminating need-to- 
know basis in accordance with the guidance set forth in 
subparagraph Ic above. This is especially true of the 
SIOP decision and execution process. 

(2) (U) There may be two types of access, PERMANENT and 
TEMPORARY. 

(a) (u) Permanent Access . After considering the 
functions of a given duty position, the frequency 
of anticipated access, and the^ categories of SIOP- 
ESI access required, access granting authorities 
listed in subparagraph 8c below may establish 
permanent SIOP-BSI billets. Although a person 
assigned to a permanent SIOP-ESI billet needs no 

further authorization for access to the categories 
of SIOP-ESI specified for the billet, holders of 
. SIOP-ESI information must still verify a valid 

need-to-know before releasing SIOP-ESI information. 

PERMANENT ACCESS BILLETS WILL BE REVIEWED AND 
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REAPPROVED BY ACCESS -GRANTING AUTHORITIES LISTED IN 
SUBPARAGRAPH 8c BELOW NOT LATER THAN 31 DECEMBER IN — 
EACH EVEN-NUMBERED YEAR. 
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(b) (U) Temporary Access . Access-granting 
authorities listed in subparagraph 8c below may 
grant approval for temporary access, up to 1 year, 
for personnel involved in briefing, studies, or 
other activities that have a projected end date. 
(3) (u) Criteria for Access . Normally, military 
personnel and civilian personnel subject to the 
provisions of the personnel policies of the Office of 
Personnel Management (0PM) and Department of Defense 
may not be authorized permanent or temporary access to 
SIOP-ESI unless they meet the basic eligibility, 
criteria set forth below; 

(a) (U) The individual shall be a US citizen. 

(b) (U) The individual shall have a final TOP 
SECRET clearance granted in accordance with the 
policy and criteria prescribed in DOD 5200. 2-R. 

(c) (U) The individual shall have been the subject 
of a completed special background investigation 
(SBI) that meets the criteria set forth in DOD 
5200. 2-R or other types of background 
investigations listed in DOD 5200. 2-R that are 
equivalent to an SBI. 
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Access for these individuals must be essential to the 
performance of their assigned duties and justified by 
their direct involvement in the review, development, 
maintenance, or implementation of the STOP. 

(4) (U) Those personnel previously granted access to 
SIOP-ESI based upon a background investigation (BI) 
that did not contain all of the elements of an SBI as 
set forth in DOD 5200, shall be the subject of an 
SBI when a reinvestigation is requested for any reason, 
such as the development of adverse or questionable 
information or when a break in the period of access or 
Federal service exceeds 12 months. 

(5) (u) Waiver of Access- Criteria . When justified by 
compelling need: 

(a) (U) A waiver of the basic eligibility 
requirement stated in subparagraph 8b(3)(b) above 
may be authorized by those access-granting 
authorities listed in subparagraphs 8c(l) through 
8c(5) below for military personnel and civilian 
personnel subject to 0PM and DOD personnel 
policies. This authority may not be delegated. 
Waivers should be approved only if the individual 
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concerned meets all the following criteria: i 

1. (U) Is being assigned to a position for 2 
which permanent access to SIOP-ESI is lequirud. 3 

2. (U) Already possesses an interim TOP SECRET 4 
clearance granted in accordance with the policy 5 
and criteria prescribed in DOD 5200. 2-R. 6 
1. (U) Has been administered a screening 7 
interview equivalent to that which is used to 8 
screen nominees for access to Sensitive 9 
Compartmented Information (SCI). 10 
4.. (U) Has an SBI initiated. ^ 11 

(b) (U) A waiver of the basic eligibility 12 

requirement stated in subparagraph 8b(3}(c) above 13 

may be authorized for military personnel and 14 

civilian personnel subject to 0PM and DOD personnel 15 

policies. Such waivers must be approved by flag I6 

officer-level, access-granting authorities as 17 

authorized in subparagraphs Be and 8d below. In is 

cases where a flag officer is not routinely ig 

available to the unit and delays in processing will ^ 

result in unacceptable operational delays in 21 

assigning personnel to SlOP-related duties, this 22 
authority may be delegated in writing to 0-6 level 
operational unit commanders (i.e. Submarine 
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Squadron Commanders, Wing commanders, or t 

equivalent). To be granted a waiver, the 2 

Individual concerned must meet all of the following _3 

criteria: _4 

1. (U) Is being assigned to a position for js 

which permanent access to SIOP-ESI is required. _6 

Z. (U) Already possesses a final TOP SECRET _7 

clearance that was based on a standard BI that 8 

meets the investigative standards o£ _9 

paragraph 2, Appendix B, DOD 5200. 2-R. 10 

1. (U) Has an SBI initiated. ^ 11 

(c) (U) Approval of waivers for contractor 12 

personnel will be made only by the Chairman, Joint 13 

Chiefs of Staff. 14 

(6) (U) Flag-officer level, access-granting 15 

authorities, as authorized in subparagraphs 8c and 8d 16 

below, may approve temporary access to SIOP-ESI 17 

information for briefings, working meetings, etc., for 18 

personnel who do not have a completed SBI as requiiuU 19 

by subparagraph 8b<2), provided all of the following ^ 

criteria are met: 21 

(a) (U) Access is essential to the performance of 22 



duty and the individual is directly involved in the 
review, development, maintenance, or implementation 
of the SIOP. 
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(b) (U) The individual meets the other basic i 
eligibility criteria specified in subparagraphs 2 
8b(3)(a) and 8b<3)<b) above. 3 

(c) (U) The individual is subject to military, OPM^ 4 
or DOD personnel policies. 5 

(7) (U) Civilian personnel not subject to provisions of g 
0PM or DOD personnel policies (i.e., contractor 7 
personnel) will not normally be granted access to 8 
SIOP-ESI. Such civilian personnel shall not be granted 9 
permanent access to SIOP-ESI but may be granted 10 
temporary access for periods not to es^ceed 1 year. 11 
Requests for temporary access for such civilian ^2 
personnel shall be referred to the Director, Joint 13 
Staff, for appropriate action. Personnel in this 14 
category for whom temporary access is approved shall 15 
possess a final TOP SECRET clearance and shall meet the 16 
basic security eligibility requirements of DOD 17 
Instruction 5220.28. 18 

(8) (U) Prior to being granted permanent access, all 19 
personnel will be briefed on the contents of this 20 
directive and any supplemental directives considered 21 
appropriate. Once granted, continued access by 22 



individuals will be based on security assurance 
measures established by the granting authority. Upon 
termination of access, appropriate debriefing must be 
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accomplished. These briefings will emphasize the 
individual's continuing responsibility for the 
protection of information obtained as a result of his 
access. To satisfy these requirements, each individual 
who is granted permanent SIOP-ESI access will execute 
an appropriate briefing/debriefing certificate, which 
will be maintained for a minimum of 1 year after the 
debriefing of an individual by the command granting 
access. These same requirements apply to personnel 
granted temporary access to SIOP-Efl, except as noted 
in subparagraph 12h below. 

(9) (U) OJCS, Services, unified and specified commands. 

Defense agencies, and JSTPS will: 

(a) (U) Develop procedures to maintain, at an 
appropriate level, SIOP-ESI access listings of 
personnel categorized by military, DOD civilian, 
and industrial contractor personnel. These 
listings will be current as of the last day of each 
quarter and will contain, at a minimum; billet 
number, name, rank/ grade, social security number 
(SSN), office/activity/unit designator, category of 
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access, travel/duty restrictions (if applicable), 
and authorization document. Annex B is an example 
of a personnel access roster. Such lists shall be 
narked: "subject to the Privacy Act of 1974 (5 
use, Section 552a)." 

(b) (U) Be prepared to provide a numerical count of 
personnel having SIOP-ESI access within 5 worXing 
days after request, in the categories specified in 
subparagraph 8b(9)(a) above, to the Directorate for 
Information and Resource Management, OJCS, ATTN: 
Security Division. In any case, such a numerical 
report will be provided by 31 January of each 
calendar year. Close-out date for the report will 
be 31 December of the preceding year. To preclude 
duplication in recording, the following 
instructions apply: 

1. (u) Services will record all personnel not 
assigned to the OJCS, Defense agencies, or to 
the staffs of unified and specified commands. 

2. (U) Unified commands will record assigned 
headquarters personnel only. 

3. (U) US Element NORAD and the specified 
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commands (US Space Command, MAC, and SAC) will 
divide personnel into two categories: 
headquarters and all others. 

4. (U) JSTPS will record single-status and 
Scientific Advisory Group personnel. 

5. (U) Guidance for recording of personnel in 
OSD, OJCS, non-DOD agencies, and the Defense 
agencies will be provided by a Joint 
Administrative Instruction* 

(10) (U) The categories of SIOP-ESI listed in Annex A 
shall be used for access control* 

(11) (U) Internal inspection procedures will give 
special and continuing attention to safeguards for 
SIOP-ESI. 

c. (U) Authority to establish billets and grant access to 
SIOP-ESI is delegated to : 

(1) (U) The Director, Joint Staff, for civilian 
personnel of the White House, members of the Senate and 
House of Representatives, and their staffs. Requests 
must be submitted to the Director a minimum of 7 work 
days prior to the date the access is required. 

(2) (U) The Director, Joint Staff, for the Joint Chiefs 
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of Staff, members of the OJCS, other Joint Staff 
agencies, Defense agencies, military personnel assigned 
to the White House and National Security Council 
Staffs, OSD, civilian personnel not subject to the 
provisions of 0PM or DOD policies (i.e., contractor 
personnel), and others as may be authorized by the 
Joint Chiefs of Staff. These requests must be 
submitted to the Director for Operations, Joint Staff, 
a minimum of 7 work days prior to the date the access 
is required. 

(3) (U) The Chief of Staff, US Army; the Chief of Naval 
Operations; the Chief of Staff, US Air Force; and the 
Commandant of the Marine Corps for members of their 
respective Services and departmental staffs, and 
personnel assigned to the offices of the Secretaries of 
the Military Departments. 

(4) (U) Commanders of unified and specified commands 
having responsibility for planning, preparation, 
coordination, and execution of the SIOP, for members of 
their staffs and subordinate command, and military 
personnel assigned to agencies directly supporting the 
CINC's SZOP-related missions. 
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(5) (U) The Director of Strategic Target Planning for 
members of theJSTPS. 

d. (U) Access to SIOP data, including SIOP-ESI, normally 
shall not be given to foreign nationals, including members 
of NATO, except as authorized by the Joint Chiefs of 
Staff. Procedures for access to US SIOP data released to 
NATO in accordance with subparagraph 6f above are 
contained in Annex B to Attachment 1 of USSAN Instruction 
1069 (DOD 5100.55, Enclosure 2). Access to SIOP-ESI data 
by US personnel assigned to NATO military organizations/ 
agencies normally will be restricted to those sanitized 
data allowed to be provided under the provisions of MJCS 
273-83. US personnel assigned to NATO military 
organizations/agencies who are also members of USEUCOM or 
LANTCOM may be authorized access to other SIOP-ESI by 
USCINCEUR or USCINCLANT. US personnel assigned to NATO 
military organizations/agencies who are not also members 
of USEUCOM or LANTCOM may be authorized access to other 
SIOP-ESI by USCINCEUR. 

e. (U) The authority to grant access delegated in sub- 
paragraph 8c above may be further de4.egated to 
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1 

2 
3 
4 



appropriate subordinates. Such further delegation shall 
be held at the highest rank and restricted to the minimum 
number of appropriately cleared individuals, consistent 

with operational requirements. ~ 

5 

f . (U) Requests for SIOP-ESI access not covered above will - 

6 

be submitted to the Director for operations. Joint Staff, - 

7 

who will forward the request and his recommendations to the - 

8 

Director, Joint Staff. The Director, Joint Staff, 

consulting the Chairman, Joint Chiefs Staff, as 

appropriate, will approve/disapprove these requests. 

9. (u) Travel ; Persons granted access to SIOP-ESI incur a 

special security obligation and must be aware of the risks 

associated with travel to or through hostile countries. 

SIOP-ESI-cleared personnel must be warned of the risks 

associated with capture, interrogations, harassment, 

entrapment, or exploitation by hostile nations or groups. 

Hazardous activities comprise assignments, visits to, travel — 

18 

through, and use of vessels owned or controlled by hostile 

19 

countries, as well as assignment or travel in combat zones or 

20 

other areas where hostilities or terrorist activities are 

21 

trtkinq place, duties behind hostile lines, and duties or 

22 
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travel in isolated or exposed areas where individuals cannot 
reasonably be protected against hostile action. Individuals 
also must be advised of the potential for terrorism and the 
active and passive' measures to avoid becoming a target or 
inadvertent victim of a terrorist act. 

a. (u) Official Travel ; All SIOP-ESI cleared personnel 
performing official travel outside the United States must 
receive a security/anti-terrorist briefing and or risk of 
capture briefing. 

t>. (u) Unofficial Travel ; All SIOP-ESI-cleared personnel 
performing unofficial travel to or through hostile 
countries must comply with the provisions below. Failure 
to comply with these provisions may result in the 
withdrawal of approval for continued access to SIOP-ESI. 

(1) (u) Give advance notice of such planned travel to 
local security officer. 

(2) (U) Obtain anti-terrorism briefing from the 
security officer prior to performing such travel. 

(3) (U) Immediately contact the nearest US Consul, 
Attache, or Embassy Regional Security Officer or Post 
Dulty Officer if detained or subjected to significant 
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harassment or provocation while traveling. 
(4) (U) Report to the specified official upon return 
from travel any unusual incidents, including incidents 
of potential security concern, encountered during such 
travel. 

c. (U) SlOP-cleared individuals whose access is being 
terminated will be officially reminded of their continuing 
obligation to protect SIOP-ESI and will be informed of the 
risks associated with hazardous activities. After SIOP- 
ESI access is terminated, provisions of paragraph b no 

4 

longer apply. 

10. (U) Visits Requiring Access to SIOP-ESI . Prior to visits 
by personnel who will require access to SIOP-ESI data, the 
headquarters to be visited will be notified of the category 
of SIOP-ESI to which each individual is authorized access. 
This certification is in addition to the requirement to 
certify appropriate security clearances. 

11. (U) Visits to JSTPS 

a. (U) Requests for visits to JSTPS by civilian personnel 
of the White House, members of Congress, and Congressional 
Staff members will be submitted to and be reviewed and 
approved by the Director, Joint Staff. 
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All other requests for visits, except working level, will 
be sent to the Director for Operations, Joint Staff, for 
approval. The Director for Operations, Joint Staff, will 
approve /disapprove or forward as appropriate to the 
Director, Joint Staff, visit requests for individuals 
possessing appropriate clearances and a valid need-to- 
know. 

b. (U) All requests for visits should be submitted a 
minimum of 7 working days prior to the visit. The timely 
submission of requests is necessary to provide sufficient 
time for adequate staffing within the Joint Staff. 
Requests should contain a detailed justification for the 
visit, type of information/briefing requested, point of 
contact at JSTPS, and recommendations on the appropriate 
type /classification of briefing to be given. 

c. (U) Members of the Service or CINC staffs who are 
directly involved with SIOP development /support /implemen- 
tation should contact the Joint Secretariat, JSTPS, 
directly for working-level visit approval. Other 
individuals from outside agencies possessing appropriate 
.SIOP clearances who wish tp visit JSTPS for working-level 
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meetings need only to notify Strategic Operations 

Division, of visit intentions. 
12. (U) SIOP Briefings 

a. (U) SIOP briefings may be given to those personnel 
under the control or military jurisdiction of the Joint 
Chiefs of Staff or of the Chief of Staff, US Army; the 
Chief of Naval operations; the Chief of Staff, US Air 
Fbrce; or the Commandant of the Marine Corps. Access for 
these individuals must be essential to the performance of 
their assigned duties and justified by their direct 
involvement in the review, development, maintenance, or 
implementation of the SIOP. Personnel who do not fall 
into this category require specific approval as indicated 
below. 

b. (U) The SIOP shall not be used as a vehicle of 
instruction at joint or Service schools or other similar 
instructional institutions. Special SIOP briefings given 
to joint or Service schools shall not contain SIOP-ESI and 
will be classified TOP SECRET. Attendance of foreign 
personnel at these briefings is prohibited. SIOP 
briefings for the joint colleges may be scheduled and 
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conducted on a mutually acceptable basis through direct 
coordination between DSTP and the cognizant commandant - 
The Chiefs of the Services will provide approval of such 
requests from Service schools over which they exercise 
cognisance. 

c. (U) SIOP briefings normally shall not be given to 
foreign nationals, including members of NATO. The 
Director, Joint Staff, may approve briefings for military 
members of NATO, provided the briefing is sanitized in 
accordance with MJCS 273-83. Other requests for SIOP 
briefings for foreign nationals may be approved by the 
Joint Chiefs of Staff. 

d. (U) The Chairman, Joint Chief s of Staff, consulting the 
other Joint Chiefs of Staff, as appropriate, will approve/ 
disapprove requests for SIOP briefings for civilian 
personnel of the White House and members of the Senate and 
House of Representatives. 

e. (U) Briefings on the SIOP Revision Report and War Games 
Report or briefings based on these reports may not be 
given except as provided in the foregoing subparagraphs or 
as approved in accordance with the provisions of JCS MOP 
39 and this directive, as appropriate. 
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1 

2 
3 
4 
5 
6 
7 
8 
9 

10 

11 



£. (U) Requests for SIOP briefings not covered above will 
be submitted to the Director for Operations, Joint Staff, 
who will forward the request and his recommendations to 
the Director, Joint Staff. The. Director, Joint Staff, 
consulting the Chairman, Joint Chiefs of Staff, as appro- 
priate, will approve/disapprove these requests. 

g. (U) An approved attendance list will be prepared to 
control entry to SIOP briefings containing SIOP-ESI. 

h. (U) Persons attending SIOP briefings containing SIOP- 
ESI must meet the criteria for eligibility for access to 

SIOP-ESI as specified in subparagraphs 8b(3), (5), and (6) — 

12 

above. Persons granted temporary access to SIOP-ESI to 

attend a briefing need not complete a briefing/debriefing — 

14 

certificate as required by subparagraph 8b(8) above, 

provided the briefing contains appropriate oral and visual — 

lo 

warning regarding the sensitivity of the data in the 

17 

briefing. 

13. (U) Training . It is recognized that operational commands — 
must conduct SIOP training in order to accomplish their stra- — 
teglc operational missions effectively. In this context, — 
SIOP indoctrination is required by many operational ' " 
. personnel • 
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The policy guidelines for SIOP indoctrination are as follows: 

a. (U) Access shall be strictly controlled on a need-to- 
know basis. 

b. (U) Attendance at indoctrination briefings will be 
restricted to those personnel actually assigned to or 
en route to operational billets that require access to 
SIOP information. 

c. (U) Indoctrination courses may be conducted at opera- 
tional commands that hold SIOP documents or at those 
appropriate training facilities that are under the direct 
supervision/control of the component commanders of the 
several unified and specified commands. Curricula and 
associated material shall be approved by these commanders. 

d. (U) The SIOP may be used as a vehicle of instruction 
provided that the precise, area of indoctrination is 
correlated with billet requirements. 

14. (u) Telecommunications System proc essing of SIOP-ESI 17 
a. (u) Special Category (SPECAT) SIQP-E SI Special Handling ii 
Designator . To preclude delivery of SIOP-ESI message ii 
traffic to a SPECAT terminal that is not specifically iS 

21. 

approved to receive SIOP-ESI messages, communications _ 



1. 

2 

3 

4 

5 

6 

7 

8 

9 

ii 
11 

12 

13 

14 

15 

16 



22 



41 



Appendix 



systems shall apply a special handling designator in the 
security field of the communications heading of all 
electrically transmitted SIOP-ESI messages to enable 
automatic switch comparison of the SIOP-ESI designator 
against the destination security level authorization. A 
designator indicating SIOP-ESI has been established and is 
promulgated in ACP 121 US Supp-1 (Series). Message 
originators must include this designator in ail SIOP-ESI 
messages (see paragraph 5d). Commanders having 
responsibility for terminals authorized to receive SPECAT 
(less SIOP-ESI) messages will ensure that adequate 
debriefing procedures are established in the event of 
inadvertent delivery of a SIOP-ESI message to the terminal 

affected. 

b. (U) connection of an ADP Syste m that Processes SIOP-ESI 
to a Telecommunications System . An ADP system processing 
SIOP-ESI in accordance with the provisions of Annex C may 
be connected to telecommunications systems such as AUTODIN 
or other nondedicated telecommunications systems only when 
approved by the Joint Chiefs of Staff. Requests for 
approval to make such connections should be forwarded to 
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the Director for operations. Joint Staff, OJCS. Requests 
should address as a minimums 

(1) (U) The procedures to be followed to ensure the • 
safeguarding of SIOP-ESI. 

(2) (U) interface design features that will ensure the 
safeguarding of SIOP-ESI. 

(3) (U) The results of evaluations of the interface 
design. 

(4) (u) The results of tests of the interface. 

(5) (U) security findings and remaining vulnerabilities 
of security concern. 

(6) (U) HOW reapproval will be handled if significant 
interface redesign is required in the future. 

(7) (u) conclusions and recommendations regarding 
security and the usii of the interface to interconnect 
the ADP system to a telecommunications system. 

c. (u) Accreditation of Telecomn -nni ^^tions S/stems To 

Process SIOP-ESI . 

(X) (U) Telecommunications systems such as AUTODIS may 
process and transmit SIOP-ESI data only after the 
system has been accredited by the Joint Chiefs of 
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staff. Requests to accredit telecommunications systems 
to handle SIOP-ESI should be addressed to the Director 
for operations. Joint Staff. OJCS. Requests for 
accreditation should include details regarding imple- 
mentation of a security certification/accreditation 
plan and adhere to guidance outlined in: Defense 
intelligence Agency Manuals (DIAM) 50-3. "Physical 
Security Standards for Sensitive Compartmented 
information Facilities"? DIAM 50-4. "Security of 
compartmented Computer operations;" and DIAM 50-5, 
"Sensitive Compartmented Information Contractor 
Administration Security." Upon development of the 
Security certification/Accreditation Plan, it should be 
submitted to the Director for Operations, Joint Staff, 
OJCS, for review and comment by OJCS personnel. The 
plan will outline the procedures to be followed to 
ensure the safeguarding of SIOP-ESI. The plan should 
address how information security will be achieved at 
the outset and how reaccreditation will be achieved 
whenever significant portions of system hardware or 
software are changed. The plan will also address the 
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protective features outlined in subparagraph 5g(9) of ^ 

Annex C. A suggested outline of the plan's contents is ^ 

as follows: 2 

(a) (U) introduction - includes brief description ^ 

of system, purpose, and scope of plan. ^ 

(b) (U) Responsibilities - identifies agencies par- ^ 
ticipating in certification and accreditation ^ 
activity and their roles and responsibilities- g 

(c) (U) system Overview - includes a functional ^ 
description of the system with appropriate ^ 
definitions of system components, interfaces, etc. ^ 
Additionally, should address security concept, ^ 
operational concept, maintenance concept, and ^ 
procurement process. 1£ 

(d) (U) Security Problem - identifies potential j^g 
system security weaknesses. 16 

(e) (U) Security Approach - describes computer ^ 
security features and communications security jjj 

considerations. 1^ 

(f) Security Activities - describes actions and 
features implemented to ensure security. 21 

22 
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(g) (U) Description of the Accommodation Package - 
describes documents comprising recommendation 
package to include the security certification 
evaluation. 

(2) (U) upon completion of system security activities, 
the final accreditation/certification request should be 
submitted for approval. The request should be 
accompanied by a security certification evaluation 
which addresses the following as a minimum: 

(a) (U) System security design and mode of 
operation. 

(b) (U) System security tests conducted. 

(c) (U) Security findings and remaining 
vulnerabilities. 

(d) (U) Conclusions and recommendations regarding 
security. 

15. (u) Transportation of SIOP-ESI Material 

a. (U) SIOP-ESI material not electrically transmitted via 
secured circuits shall be dispatched only by courier. The 
Armed Forces Courier Service (ARFCOS) should be utilized 
to the maximum extent feasible. Special handling 
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instructions within the ARFCOS system will be as 
prescribed by the Director, ARFCOS. Dispatching officials 
will designate the material SIOP-ESI when entering it into 
the ARFCOS system and will have the following statement 
affixed to the outside of the package or container in 
addition to the normal addresses and markings: 
"RESTRICTED HANDLING REQUIRED" 

(1) (U) Air transportation of this package will be in 
the following priority: military aircraft, regularly 
scheduled US commercial cargo aircraft, government- 

.chartered commercial aircraft, regularly scheduled US 
commercial passenger aircraft (ARFCOS only). 

(2) (U) TWO COURIERS ARE REQUIRED BETWEEN US MILITARY 
INSTALLATIONS/FACILITIES. ONE COURIER CAN BE USED 
DURING FLIGHT SO LONG AS TWO COURIERS DELIVER AND PICK 
UP MATERIAL AT PLANESIOE OFF MILITARY BASES. 

(3) (U) When not attended by qualified couriers, the 
minimum security required for storage of this package 
is in a secure room supplemented by guards or an 
intrusion detection alarm system or a Class A vault 
constructed in accordance with individual Service 
directives. 
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(4) (U) COURIERS AND GUARDS MUST POSSESS TOP SECRET 
CLEARANCES BASED ON A COMPLETED BACKGROUND 
INVESTIGATION. 

b. (U) Commanders supporting ARPCOS are responsible for 
providing arrangements for the transportation bf SIOP-ESI 
material by military air. Priority will be provided to 
the shipment of SIOP-ESI material to meet the deadline 
delivery date. 

c. (U) When not transported via ARFCOS, SIOP-ESI material 
being transported or processed outside military 
installations/facilities will be accompanied by two 
appropriately cleared couriers (in accordance with the 
handling restrictions delineated in subparagraph 15b 
above) assigned the primary responsibility for 
surveillance, and security of the material. When utilizing 
authorized air transportatipn, as delineated in 
subparagraph 15c(l) and (2) below, one courier may be used 
during flight so long as two couriers are used to 
transport the SIOP-ESI material to and from the aircraft 
and to maintain surveillance until the aircraft is 
airborne. 

(1) (U) The following types of air transportation are 
authorized for movement of SIOP-ESI material: 
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(a) (U) Military aircraft. 

(b) (U) US contract commercial aircraft when the 
manifest is under US military control. 

(c) (U) US commercial nonpassenger cargo aircraft. 

(2) (U) SIOP-ESI material WILL NOT be transported by 
any of the following neans: 

(a) (U) Commercial passenger aircraft (except for 
ARFCOS, as described above). 

(b) (U) Department of State Diplomatic Courier 
Service. 

(c) (u) Foreign or combined courier service (such 
as NATO). 

(3) (U) Ground transportation of SIOP-ESI material will 
be, in order of priority, by US Government sedan, US 
Government bus, US Government chartered bus, commercial 
transportation. 

16. (U) Actions in Case of Possible or Actual Compromise . 
The Joint Chiefs of Staff and the DSTP shall be informed by 
the most expeditious means available, consistent with 
security requirements, of any compromise or suspected 
compromise of any portion of any SIOP material. Such reports 
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will include specific identification of the document, whether 
or not SIOP-ESI is involved, and an opinion as to probability 
or possibility of compromise. The DSTP will recommend 
appropriate actions required with regard to modification of 
the plan or related procedures as a result of the actual or 
possible compromise for consideration by the Joint Chiefs of 
Staff. The provisions of Chapter VI, DOD 5200. l-R also 
apply. 

17. (u) Machine Reproduction of SIOP-ESI . The capability of 
data reproduction by electronic means presents a special need 
for attention to security precautions where such means are 
used m processing classified material. The need is more 
pressing in instances where distribution and access must be 
strictly controlled, as in the case of SIOP-ESI material, 
commands and agencies that possess the means for machine 
reproduction of SIOP-ESI material, or which are authorized to 
release such materials to other agencies for similar 
reproduction, shall establish suitable and adequate means for 
accounting for and controlling access to SIOP-ESI. In every 
case, such means shall ensure that numbers of copies, 
extracts, or information derivatives are limited to those 
required to serve valid needs. Access to documents and 
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reproduction equipment shall be limited to the minimum 
numbers of properly cleared personnel. Accountability 
systems shall ensure that all documents produced by 
electronic means, including ADP systems, are properly 
identified, marked, distributed, and safeguarded. 
18. (U) ADP 

a. (U) Safeguarding SibP-ESI in an ADP environment 
requires special precautions achieved by using a 
combination of conventional security procedures and new 
automated techniques. Annex C delineates the minimum 
security requirements for ADP systems.^ ADP systems 
security should include the following! 

(1) (U) ADP hardware features. 

(2) (U) ADP software features. 

(3) (U) Communications security. 

(4) (U) Emanations security. 

(5) (U) Physical security measures. 

(6) (U) Personnel security measures. 

(7) (U) Procedural safeguards (management, adminis- 
trative, and operational procedures). 

b. (U) Recording media used to store or process SIOP-ESI 
must retain the TOP SECRET classification and be 
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controlled as SIOP-ESI until one of the declassification 
procedures delineated in Annex D is carried out. The 
declassification procedures in Annex D apply to release of 
the recording media for maintenance of equipment, return 
of parts to contractor, and release of computers to 
contractors. 

c. (U) The provisions of Annexes C and D may differ from 
the requirements of communications security (COMSEC) 
materials and information. Refer to appropriate COMSEC 
directives for security requirements and declassification 
procedures- for COMSEC items when COMSEC and SIOP-ESI are 
being processed. 
19. (u) Destruction . As a matter of policy, in order to 
ensure control and minimize the possibility of compromise, 
SIOP material will be destroyed promptly when superseded by 
new editions or when no longer required for operational use. 
Archive copies are authorized to be established by JSTPS, as 
prescribed by the Joint Chiefs of Staff. Officials 
certifying and witnessing the destruction of material 
containing SIOP-ESI must have authorization for access to the 
category (ies) of SIOP-ESI contained in the material being 
destroyed. 
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ANNEX A 

CATEGORIES OF SIOP-EXTRE^LY SENSITIVE 
INFORMATION (SIOP-ESI) iUJ 

1 (U) scrupulous discrimination .ust be used -hen granting 

access to Categories 01. 02. 04. 09. and 10. Use of one. or 

AR fift 07 or 08 is preferable to 
more, of Category 03, 05. 06. 07. or uo y 

granting access to Category 01. 02. 04. 09. or 10. Access 
categories are not meant to be a list of greater or lesser 
sensitivity or exposure; they are -eant to be subject 
restrictive. The .categories are intended to li-it access to 
the specific area of duty responsibility. Personnel granted 
permanent or temporary access to SIOP-ESI need no further ^ 
authorization for access to t.e specific categories of SIOP- 
ESI specified for a billet: however, holders of SIOP-ESI 

«tiLl verify a valid neod-to-know before 
information must stiLi verify 

releasing SIOP-ESI. 

2. (U) category numbers are unclassified. When associated 

with their definitions, they are CONFIDENTIAL. 

^3. 



CLASSIFIED BY DIRECTOR. J-3 
DEClASSIFY ON OADR 



^NriDENTIAL • 
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Mmtx B 

EXAMPLES OF SIOP-EXTREMBLY 8BN8ITIVE IHPOBMATZON ACCESS ROSTERS 



Billet No/SSN 



Company 



AIS 



SIOP-ESI PERMANENT ACCESS ROSTER FOR (AGBNCT) 
(Subject to Prlvacry Act of 1974} H DSC 5S2*)) 



Title/Name 



Rantt/Gcade 



Seevlea 8I0P Categories 



Authorltation 
Documnt 



xyOOOOOI Dlr» XYl staff CS-06 

123-45-6789 Doe, John Q. 

xyOOO002 Oir, ABC staff LTC 

987-65-4321 Tree, Tall P. 



Civ 



USA 



02 03 OS 07 



01 04 09 



OJSM 12)4-40. 
26 Sep 1940 

3W 4567-4S 
14 Jan L94S 



SIOP-ESI TEMPORARY ACCESS ROSTER FOR (AGEVCY) 
(Subject to Privacy Act of 1974M& USC 5S2an 



Name 



SSN 



SlOP Categories 



Authorisation Expiration 
Docuaent Date 



Doe, John Q. 123-45-6789 02 03 OS 07 
Tree, Tall F. 987-65-4321 01 04 



DJSH 1234-40 28 Sep 1941 
28 Sep 1940 



J3H 4567-45 
14 Jan 194S 



14 Jul 194"^ 



Category of ac cess does not automatically deternlne need for travel/duty restriction. Determination must be made on 
case-by-case basis, depending on an Individual's frequency/degree of access (see Annes E) . 



UNCLASSIFIED 

ANNEX C I 

MINIMUM SECURITY REQUIREMENTS FOR AUTOMATIC DATA 

PROCESSING SYSTEMS PROCESSING SIOP-EXTREMELY £ 
SENSITIVE INFORMATION (SIOP-ESI) ^ 

1. An Automatic Data Processing System (ADPS) is defined in ^ 
DOD Directive 7920.1 as an interacting assembly of ^ 
procedures, processes, methods, personnel, communications, ^ 
and automatic data processing equipment to perform a series ^ 
of data processing operations— a combination of automatic ^ 
data processing resources and automated data systems. This ^ 
definition is interpreted as including all peripheral devices 
used in performing data processing operations located within 

or remote to the central ADPS facility. 

2. Authorities listed in subparagraphs 8c(l) through 8c{5) of 
the Appendix may approve the processing of data containing 
SIOP-ESI on an ADPS when operations are controlled as 

indicated below- j^g 
a. The preferred mode of operation is the Dedicated 
Security Mode as defined by paragraph 1-211, DOD 5200. 28-M. 

19 

"All portions of this annex are UNCLASSIFIED" 

21 
22 
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b. in exceptional cases where the Dedicated Security Mode 
of operations is not reasonably practicable, the 

system High Security Mode as defined by paragraph 1-227, 
DOD 5200. 28-M may be used. 

c. Regardless of whether the Dedicated Security Mode or 
the system High Security Mode is used, the ADPS including 
all of its connected peripheral devices and remote 
terminals, must be dedicated to the processing of SIOP- 
reldted and/or SIOP-ESl and be under the exclusive control 
of persons who are authorized access to SIOP-ESl. 

d. All peripheral devices in areas not manned by personiiel 
cleared for SIOP-ESI must be disconnected from the ADPS by 
either a manually thrown switch or by unplugging at a 
patch panel. 

3. Efficient utilization of the ADPS is important but should 
not be used as a criterion for determining the need-to-lcnow 
and access to SIOP-ESI. 

4. Appropriate proce.lures will be established for debriefing 
persons not authorized access to SIOP-ESI should inadvertent 
disclosures of SIOP-ESI occur while processing under the 
modes of operation delineated in subparagraphs 2a and 2b 
above, paragraph 16 of the Appendix will only apply in the 
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case of possible or actual compromise. 

5. Requirements for ADPS containing SIOP-ESI are stated 
below: 

a. ADPS security Officer . A Security Officer properly 
cleared for access to SIOP-ESI will be appointed for each 
ADPS that will process data bases containing SIOP-ESI. 
The designated approving authority (DAA) for commands 
having operational responsibility for the ADPS will ensure 
such appointment. The responsibilities of the ADPS 
Security Officer will include: 

(1) Ensuring that each site has written procedures that 
outline operator actions required for known fault/ 
security events. These procedures should include 
operating restrictions, if required, and delineate 
reporting and investigation requirements. 

(2) Ensuring continued compliance with all requirements 
for processing and storing data containing SIOP-ESI 
including the requirements of this directive. 

(3) Ensuring that security deficiencies that occur in 
the operation of the ADPS are expeditiously reported to 
the command DAA. 

(4) Curtailing system processing, pending investigation 
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when co.>tiaue.l operation couLl le«.i to compromise. 
(5) conducting a review of audit trails Eor security- 
related activities, 
command DAA8 will immediately forward to the Director for 
operations. Joint Staff, all security deficiencies they 
consider significant and will forward annual certification 
that the system complies with all requirements for 
processing and storing data containing SIOP-ESI. If 
systems do not comply with all requirements for processing 
and storing data containing SIOP-ESI. command DAAs will 
list deficiencies and proposed corrective actions in their 
annual reports . 

b. Personnel Security and Acc ess Control Measures 
(I) Unescorted access to any portion of the ADPS 
processing SIOP-ESI will be limited to personnel 

authorized access to SIOP-ESI. All other personnel 
requiring access to such areas must be escorted by 
personnel authorized access to SIOP-ESI. The area will 
be Inspected prior to such visits to ensure that no 
SIOP-ESI is visible. Escorts are responsible for 
ensuring that no disclosure of SIOP-ESI occurs. 
(2) A personnel access control system will be 
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maintained at the central site and at the remote 
terminal areas to permit ready identification of those 
persons authorized access to the ADPS. 
(3) A record will be maintained of all persons that are 
escorted into the areas identified in subparagraph 
5b(l) above. The ADPS Security Officer will ensure 
that this record is retained for a minimum of 12 months 
from the date of the last entry in the log. 

c. Physical security Protection . Physical security will 
be in accordance with DOD Directive 5200.1, DOD Regulation 
5200. 1-R, DOD Directive 5200.28. and DOD Manual 5200. 28-M. 

d. rnmmunt cat ions Links . All communications links will be 
secured in accordance with DOD Directive C-5200.5 for the 
classification of information transmitted. When 
connection is approved by the Joint Chiefs of Staff (see 
subparagraph 14b of the Appendix) and is connected in 
accordance with subparagraph 5g(9) of this annex, and ADPS 
that processes data containing SIOP-ESI may be conducted 
to nondedicated telecommunications systems that have been 
accredited for the transmission of SIOP-ESI (see 
subparagraph 14c of the Appendix). 

e. Emanations Security. All equipment associated with an 
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9 

10 
11 



ADPS, including remote terminals, modems, multiplexers, i 

crypto devices, patch panel, etc., that is. used to process 2. 

data containing SIOP-ESI must meet the objectives of DOD i 

4 

Directive s-5200.19. ADPS equipment processing SIOP-ESI, 
and not previously TEMPEST tested. wiXl be tested and 
evaluated at the earliest possible date. If the ADPS 2- 
equipment is found to be deficient, appropriate counter- 2 
measures will be implemented immediately and a plan will « 
be developed to phase In equipment that will meet TEMPEST 
standards at the earliest possible date. 

i. Security Classification Responsibilities. The user is 
responsible for verifying that no extraneous data are — 
included in his output product and that the security — 
classification indicated on the product is consistent with ii 

the data contained therein. He Is also responsible for i- 

16^ 

reporting all discrepancies. 

g. software/Hardware Controls . The following features 
will be Implemented in each ADPS that is to be used to 
process data containing SIOP-ESI. Special controls will 
be Implemented governing access to. and modifications of. — 
these features. Where implementation of the following 
features is not feasible because <if equipment configuration 



17 
18 
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or other legitimate reason, other compensating controls 
will be developed and approved for implementation by 

command DAA. 

(1) Security Markings and Special Access Labels 

(a) All printed material produced from ADPS 
containing SIOP-ESI and operating in accordance 
with paragraph 2 above will have machine-produced 
security markings and special access labels at the 
top and bottom of each page equivalent to the 
highest classification of the data contained in the 
product. In addition, the front covers will be 
marked with a SAFEGUARD statement (see Tab). • 

(b) Removable storage media; i.e., tapes, card 
decks, discs, and similar devices used to store 
data bases containing SIOP-ESI will contain TOP 
SECRET classification markings in accordance with 
DOD 5200. 1-R, with the SIOP-ESI label appropriately 
affixed to the storage media. These security 
markings/labels will be retained until the device 
is declassified by approved procedures described in 
Annex D. 
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(2) User Identification/Authentication . Operation of 
the ADPS will include a mechanism that identifies and 
authenticates user personnel accessing it remotely. 
This mechanism will consist of software and/or hardware 
devices, manual control procedures at terminal sites, 
or other appropriate measures designed to validate the 
identity and access authority of system users. 

(3) Memory Protection . System hardware and software 
features will exercise control over the addresses to 
which a user program has access. 

(4) Separation of User/Executive Modes of O peration. 
The user and executive modes of an ADPS will be 
separated so that a program operating in user mode is 
prevented from performing unauthorized executive 
functions. Controls will be implemented to maintain 
continued separation of these modes. 

(5) Memory Residue Clean-Out . Measures will be 
implemented to ensure that memory residue from 
terminated user programs is made inaccessible to other 
users. This will be accomplished as required by DOD 
5200. 28-M. 
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(6) Access Control , Effective controls will be 
implemented to limit user and terminal access to 
authorized information and programs as well as to 
control read and/or write capability. In addition to 
software, positive disconnection of hardware can also 
be used to control remote terminals. Each individual 
user of the system will have a unique unclassified user 
identification (ID) assigned. Access attempts from 
remote terminals will be limited to TWO attempts, after 
which the terminal will automatically be locked-out and 
the ADP Security Officer notified.' 

(7) Audit Trail capability . Each ADPS will produce an 
audit trail as defined in DOD 5200. 28-M containing 
sufficient information to permit a regular security 
review of system activity. Audit trail information 
will be controlled closely by the ADPS Security Officer 
and, since SIOP-ESI may be contained therein, should be 
marked and handled as SIOP-ESI until actual classifica- 
tion is determined. 

(8) Changing into and out of SIQP-ESI Operations 

(a) Before starting to process SIOP-ESI, the area 
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must be cleared of all unauthorized personnel and i 

unauthorized peripheral devices must be 2 

disconnected. The point of disconnect must be under 3 

the control of personnel cleared for SIOP-ESI. 4 

(b) After processing is completed, all removable 5 

storage media containing files and/or programs used £ 

during SIOP-ESI processing will be disconnected 7 

from the ADPS. If any SlOP-related files or 8 

programs were used and those files or programs are 9 

to be used in a non-SIOP-ESI processing environment, lO 

they must contain ho SIOP-ESI or must be purged of U 

any SIOP-ESI prior to such use. All nonremovable 12_ 

storage media and memory must be cleared of all 13_ 

SIOP-ESI. Erase and overwrite procedures !£ 

delineated in Annex D apply if the ADPS is to be 15 

used in an unclassified mode. l£ 

(9) Communication Connectivity . If an ADPS that has 17 

been approved for processing SIOP-ESI is also approved IB 

for interface with an external telecommunications 19 

system, such as AUTODIN or other telecommunication 20 

systems, while processing SIOP-ESI, the following 21 

22 
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additional protective features are rociuLreci: 1 

(a) All interfacing telecommunications channels 2^ 
will be protected by cryptographic equipment or 3 
approved protective wireline distribution system. 4 

(b) Specific measures will be implemented to 5 
prevent remote programming of the ADPS via external 6 
telecommunications. 2. 

(c) Procedures will be implemented to protect 8 
against accidental spillage of the data base into 9 
external telecommunications. 10, 

(d) Procedures will be implemented for fault 11 
monitoring that will detect malfunctions and halt 12 
processing when such malfunctions degrade any 13 
protective feature. il. 

(e) Authentication procedures will be employed when 15 
telecommunications are used for ADPS-to-ADPS 16 
operations and/or ADPS-to-Remote user operations to 17 
limit access to SIOP-ESI to those network terminals 18 
and ADPS authorized to handle the data. I?. 

li. Individual Security Responsibilities . All users of the 20_ 

ADPS will be briefed on the need for exercising sound 21 

22 
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security practices in protecting the information stored, 
processed, and produced by the system. Users will be 
informed when the system is operating in accordance with 
paragraph 2 above. Receipt of any information not specif- 
ically requested and of an unknown source shall be 
reported immediately to the ADPS Security Officer, 
i. civilian Contractor ADP Maintenance Personnel . These 
personnel will not be granted access to computer centers 
where data containing STOP-ESI is resident in the ADPS 
unless the provisions of subparagraphs 8b(7) and 8b(8) of 
the Appendix have been met. 

j. Reports . When an inadvertent disclosure occurs 
involving an ADPS processing SIOP-ESI, the report required 
in paragraph 16 of the Appendix shall be expanded to 
include at a minimum: 

(1) An abstract of the problem. 

(2) The type and source {^.g.. Annex F data from disc 
pack) of the data involved. 

(3) The ADP equipment involved. 

(4) The number of people inadvertently exposed to the 
data. 
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(5) An assessment of the risk of compromise of the 
* data. 

(6) immediate action taken (e.g., system processing 
curtailed as authorized by subparagraph 5a above). 

(7) Steps being taken to preclude a recurrence of the 
problem. 

(8) Comments and recommendations regarding problems 
considered to be of concern to the SIOP community and 
not restricted to the reporting site. This information 
is essential in order to determine the disclosure risk 
level of SIOP-ESI throughout the SIOP community and to 
determine whether similar problems exist on a 
community-wide basis. Reports will be submitted on an 
"as-occurring" basis. 

k. Exceptions . Requests for exceptions to the security 
measures stated above will be submitted to the Director, 
Joint Staff. 
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TAB TO ANNEX C 
SAFEGUARD STATEMENT 
♦♦SAFEGUARD** 

This ADP product was produced during a TOP SECRET SIOP- 
EST period. Handle as TOP SECRET STOP-ESI until this 
statement has been signed by an individual who is 
designated to determine that the security 
classification of this document is appropriately marked 
and that the document can assume the handling 

requirements for that classification. Report any 

» 

unusual or unrequested output discrepancies immediately 

tos 

^Pr in ted/Typed Name 

Signature: » Date: _ 

ADPS Security Officer 
Room Number 

Phone Number ; 

This ADP product has been reviewed by the undersigned. The 
correct security classification of this document is 



Signature: » Date: ^ _ 

% 

Tab to 
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2 

Printed/Typed Name — 

3 

Room Number — 

4 

Phone Number - 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 
18 
19 
20 
21 
22 
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• ANNEX D 

DECLASSIFICATION PROCEDURES FOR ADP MEDIA-STORING 
S?OP-^TREMELY SEN INFORMATION (SIOP-ESI) (0) 

1. General . . Safeguarding classified information in a 
computer or computer system requires special precautions 
because of the types of storage media and devices (magnetic 
drums, discs, disc packs, and tapes) used to store, record, 
or manipulate data that must be protected by appropriate 
classification and security controls until procedures in 
paragraph 2 below are carried out. 

2. Declassification . The eventual temporary or outright 
release of the storage device or a system including storage 
Biedia should be anticipated. Procedures to be used in the 
event a decision is made to release or deploy the storage 
media are as follows t 

•a. Magnetic Tapes . Tapes used to store magnetically 
recorded digital data may be degaussed and declassified by 
erasing with approved tape degaussers that meet technical 
specifications promulgated by the Department of Defense, 
b. Mac»netic Discs. Pics Pa cks, Drums, and Other Similar 
Ri ^id Magnetic Storage Devi ces (e.g.. Core Memory). 

"All portions of this annex are UNCLASSIFIED" 
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The equipment will be checked immediately prior to 
beginning or after (whichever is appropriate to the 
particular computer) the overwrite procedures to ensure 
that malfunctions do/did not occur that will prevent the 
classified information from being effectively overwritten. 
Further, when the capability exists, as an integral part 
of the storage subsystem, an a.c./d.c. erase will be 
applied to all data tracks before the tracks are 
overwritten and the overwrite verified. Thereafter, all 
storage locations will be overwritten minimum of three 
times: once with aU binary ones? once with all binary 
zeros; and once with a single numeric, alphabetic, or 
special character. Such alphanumeric or other 
unclassified data shall be left on the device. The 
current used in overwriting must be equal to or greater 
than that used in recording the information but of a 
strength that will not damage or impair the equipment, 
c. inoperative Magnetic Drums, Discs . Disc Packs, and 
Similar Rigid Storage Devices . If the storage device has 
failed in such a manner that it cannot be overwritten, the 
device may be declassified by exposing the recording 
surface (s) to a magnet having a field strength at the 
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recording surface of at least 1,500 Oersted. Care must be 
taken to ensure that the entire surface is wiped at least 
three times by a nonuniform motion of the magnet. Care 
must be taken to ensure that all tracks are covered by the 
center of the magnet. A thin sheet of clear plastic (a 1- 
5 mil sheet) should be used to prevent damage to the 
recording surfaces. 

d. internal Memory . Detailed memory erase or clearing 
programs or routines should be prepared by qualified 
automatic data processing programmers and approved and 
controlled by the Automatic Data Processing System (ADPS) 
Security Officer. Declassification procedures for main or 
internal memories depend on the type and characteristics 

of the memory. 

(1) Ferrite Core Memory . Ferrite core memory used in 
processing information classified SECRET and below must 
be declassifed by setting each addressable memory 
location alternately to binary high values and binary 
low values for lOOcycles until the state is changed at 
least 99 times. The same procedure applies for 
declassifying core memory used for processing 
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TOP SECRET information, except that the state must be 
changed at least 999 times. 

(2) Plated Wire Memory . Plated wire memory used to 
continuously store classified information undisturbed 
more than e hours may not be declassified. Such media 
will continue to retain their classification until 
physically destroyed. If the classified information is 
stored less than 8 hours and unclassified data is later 
stored for at least an equal time, the memory may be 
declassified according to the procedures for magnetic 
ferrlte core memory. 

(3) Rpn.i conductor Memory . Semiconductor memory may be 
declassified according to the procedures for magnetic 
ferrite core, except for volatile semiconductor memory, 
volatile semiconductor memory may be declassified by 
setting "0" or "1" in all memory locations, 
e. Magnetic Storage Media Use d To Store Analog. Video, or 
Similar Nondiaital Information . Magnetic tape used to 
record analog, video, or similar types of nondigital 
information may be declassified by degaussing as in 
subparagraph 2a above. There is no approved overwrite 



D-4 



Annex 'D 



method for declassifying rigid magnetic storage media used 
for nondigital informatior.; specific guidance may be 
obtained as stated in paragraph 5 below. In the case of a 
failure of the tape degausser or in the absence of an 
approved overwrite method for rigid surfaces, a magnet may 
be used, as described in subparagraph 2c above, 

3. Disposition Approval . With the specific approval in each 
case of the designated (systems) approving authority (DAA) 
within the DOD component that is responsible for the security 
features of the ADPS, storage media treated as above may be 
handled as unclassified and released as necessary. 

4. Records . A record of the procedures used to declassify 
each storage media device shall be maintained for a period of 
2 years after disposition of the media or device. 

5. Specific Guidance 

a. Guidance for eradication of storage media not covered 
above may be obtained by submission of all pertinent 
details to the Director, Joint StafL, for consideration on 
a case-by-case basis. 

b. in the absence of eradication by approved equipment or 
procedures or at the direction of the designated official 
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responsible for the security features of the ADPS, 
magnetic information storage media will be safeguarded in 
the manner prescribed for the highest classification ever 
recorded thereon until it is destroyed. 
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SENSITIVE INFORMATION (SIOP-ESI> lu; 



1. 



T (U) purpose . This policy is based upon the need to 
protect SIOP-ESI from possible compromise resulting fro. the 
capture, interrogation, exploitation, or entrapment of- 
personnel who have or have had access to SIOP-ESI. 

- CLASSIFIED BY DIRECTOR, J-3 
DECLASSIFY ON OADR 



E-i 



Annex E 



3. (U) Definitions 2 

a. (U) SIOP-EST . STOP-EST is defined in subparagraph 3b ^ 

of the Appendix. £ 

b. (U) Hazardous Activities . Hazardous activities include 5 
assignments or visits to and travel through countries g 
listed in the Tab. Hazardous activities also include 7 
assignment or travel in combat zones or other areas where g 
hostiliti<*s arc* taking place, duty behind hostile lines, 9 
and duty or travel in isolated or exposed areas where i£ 
individuals cannot reasonably be protected against hostile 11 

action. 12^ 

c. (U) Foreign Travel Briefings . These briefings alert 13^ 
traveling personnel to the potential for harassment, 14 
provocation, or entrapment by foreign intelligence 15^ 
services in overseas areas and in other environments of an i£ 
international nature, such as conferences, scientific and j2 
technical meetings, seminars, and symposiums. They is 
examine foreign intelligence service methods of operation 19^ 
and suggest precautions designed to minimize the risk of 20_ 
direct foreign intelligence exploitation of personnel 2I 
during periods of temporary duty or leave. 22 
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a. (U) Antiterrorist Briefings . These briefings advise 2 
personnel of a variety of measures that may be employed to 3 
safeguard oneself against terrorist threats in overseas 4 

areas. 5. 
4. (U) policy , personnel who have detailed knowledge and g 
continuing access to SIOP-EST information at Service, joint 
agency, or unified and specified command level may be subject g 
to travel and assignment restrictions, as determined by the 9 
authority granting access. 10_ 

a. (U) Official Assignment/Travel ' 11 

(1) (U) To tKe extent practicable, personnel with 
detailed knowledge and continuing access to SIOP-ESI 
should not be assigned to or directed to participate in 
hazardous activities. Regardless of the degree of 15 
access, all personnel who have access to STOP-EST must ^ 
be appropriately briefed prior to participation in any 
hazardous activity or visit as defined in subparagraph 

3b above. 1$. 

(2) {U) prior to official visits to or travel through 20 
the countries listed in the Tab, personnel who have 2I 
access to STOP-EST must: 22^ 
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(a) (U) Give their supporting security office 2 
advance notice of such planned travel. 3^ 

(b) (U) Obtain foreign travel and antiter ror ist £ 
briefings before traveling to such countries, 5^ 

(c) (U) immediately contact the nearest US Consul £ 
Attache, or Embassy Regional Security Officer or 7 
post Duty Officer if detained or subjected to £ 
significant harassment or provocation while 9 
traveling. 1£ 

(d) (U) Report to the specified official upon 11 
return from travel any unusual incidents, including 12^ 
incidents of potential security concern, encountered 13^ 
during such travel. 14 

NOTES Individuals who frequently travel, or attend or l£ 

host meetings of foreign visitors of the types 

described in subparagraphs 3c above, need not be i£ 

briefed for each such occasion, but shall be 

provided a thorough briefing at least once each 6- 17 

month period and a general reminder of their 

security responsibilities prior to each such 18 

activity, 

19 

b. (U) Unofficial Travel 20 

(1) (U) prior to unofficial visits to or travel through 21 

the countries listed in th<> Tab, personnel who have 22 
access to STOP-EST must take the actions outlined in 
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subparagraph 4a (2) above. 

(2) (U) Access-granting authorities may d^ny unofficial 
travel by notifying the requester in writing of . the 
specific conditions upon which the denial is based. 

c. (U) Actions Requi red of All Persons Traveling to or 

Through Designated Countri es (see Tab). 

(1) (u) During official or unofficial visits to or 
travel through the countries listed in the Tab, persons 
who have access to SIOP-ESI MUST immediately contact 
the nearest US consular, attache, or Embassy official 
if they have been detained or subjected to significant 
harassment or provocation while traveling. 

(2) (U) Persons who have access to SIOP-ESI must be 
reminded annually of the foregoing obligations through 
security education programs. 

d, (U) Individuals With Previous Access . Persons whose 
access to SIOP-ESI is being terminated will be officially 
reminded if their obligation to ensure continued 
protection of SIOP-ESI and reminded of the risks 
associated with hazardous activities as defined herein. 
5. (U) Respons ibi 1 i t i es 
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a. (U) The Directorate for information and Resource 
Management, OJCS, will prepare and disseminate to the 
holders of this docaraent an updated list of countries 
(Tab) identified as posing a security risk bearing on this 
policy as changes occur - 

b. (U) Access-granting authorities will issue implementing 
directives concerning travel and assignment of personnel 
iinder their cognizance. 
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SECRET 

1 December 1987 



FIRST CORRIGENDUM TO MJCS 75-87 
"Safeguarding the Single Integrated Operational Plan" 

Note by the Secretaries 

Holders are requested to substitute the attached revised pages 
and to destroy the superseded pages in accordance with security 
regulations. 

t, 

Secretaries 
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RELEASE COVERED BY 
JCS MOP 39 



Regraded UNCLASSIFIED 
Without Attachment 
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OFRCE OF THE CHAIRMAN 



THE JOINT CHIEFS OK STAFF 
WASHINGTON. D.C. 2031S-0001 



Reply ZIP Code: 
20318-0300 



MCM-98-90 
13 June 1990 



MEMORANDUM FOR HOLDERS OF MJCS 75-87 

Subject: First Note to Holders on "Safeguarding the Single 
Integrated Operational Plan" 



1. The Appendix to MJCS 75-87 has been revised to reflect 
changes in the special background investigation waiver 
authority. Holders are recpiested to substitute the attached 
revised pages 26, 21, and 28, and to destroy the superseded 
pages in accordance with security regulations . 

2. Holders of MJCS 75-87 are requested to attach a copy of 
this memorandum to the document for record purposes. 

3. This memorandum and the enclosure are UNCLASSIFIED. 



For the Chairman, Joint Chiefs of Staff: 




Major General, USMC 

Vice Director, Joint Staff 



Enclosure 
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THE JOINT CHIEFS OF STAFF 

WASHINGTON. DC. ?O3OI-5000 



MJCS 75-87 
20 r!ny 1987 



MEMORANDUM FOR: DISTRIBUTION LIST 

Subject: Safeguarding the Single Integrated Operational Plan 



1. The Appendix contains the policy of the Joint Chiefs of Staff 
with regard to security of the Single Integrated Operational Pla 
(SIOP), the basic administrative and handling requirements, and 
the emphasis that must be placed on control of SIOP-Extreraely 
Sensitive Information (SIOP-ESI). 

2. This memorandum supersedes SM-313-83, 10 May 1983, 
"Safeguarding the Single Integrated Operational Plan." 

3. Without enclosure, this memorandum is UNCLASSIFIED. 



For the Joint Chiefs of Staff: 




RICHARD A. BURPEE 
Lieutenant General, USAF 
Director for Operations 



Enclosure 




OFFICE OF THE CHAIRMAN 



THE JOINT CHIEFS OF STAFF 
WASHMOTON, D.C. 2031»4001 



Reply ZIP Code: 
20318-0300 



MCM-98-90 
13 June 1990 



MEMORANDUM FOR HOLDERS OF MJCS 75-87 

Subject: First Note to Holders on "Safeguarding the Single 
Integrated Operational Plan" 



1. The Appendix to MJCS 75-87 has been revised to reflect 
changes in the special background investigation waiver 
authority. Holders are requested to substitute the attached 
revised pages 26, 27, and 28, and to destroy the superseded 
pages in accordance with security regulations. 

2. Holders of MJCS 75-87 are requested to attach a copy of 
this memorandum to the document for record purposes. 

3. This memorandum and the enclosure are UNCLASSIFIED. 



For the Chairman, Joint Chiefs of Staff; 




GENE A. DEEGAN U 
Major General, USMC 
Vice Director, Joint Staff 



Enclosure 
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DISTRIBUTION 



No. of Copies 



Secretary of Defense 13* 

Director of Central Intelli>3ence 1 

Chairman, Joint Chiefs of Staff 1 

Chief of Staff, US Army 6 

Chief of Naval Operations 4 

Chief of Staff, US Air Force 5 

Commandant of the Marino Corps 3 

Commander in Chief, US Space Command 5 

Commander in Chief « US Atlantic Command • 4 
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APPENDIX k 

SAFEGUARDING THE SINGLE INTEGRATED OPERATIONAL PLAN (U) 1 

(U ) Genera I — 

a. (U) The guidance lierein sets forth the policy of the i 
Joint Chiefs of Staff with regard to security of the 5. 
Single Integrated Operational Plan (SIOP). This directive 1 

7 

IS intended to: _ 

(1) (U) Emphasize the need for strict observance of 5. 

q 

basic security regulations in safeguarding the SIOP. — 

(2) (U) Emphasize that stringent control must be i2. 
exercised over SIOP-Extreraely Sensitive Information li 
(SIOP-ESI)i as defined below. il 

(3) (U) Provide the basic policy for the identification ii 

of SIOP-ESI. — 

15 

(4) (U) Set forth specific security controls and — 
procedures to ensure that distribution of and access to — 
SIOP-ESI are authorized with utmost discrimination in iZ 
all cases. — 

b. (U) Executive Order 12356, DOD 5200.1 and DOD 5200. 1-R 

20 

provide instructions for the ODD Information Security — 

21 

Program. These documents prescribe measures for — 

CLASSIFIED DIRECTOR, J-3 — 
DECLASSIFY ON OADR 
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classification, reproduction/ accountability, safekeeping, i 

storage, dissemination, and transmission of official — 

inforjnation and include witliin their scope the documents — 

that constitute the SIOP. This directive is supplemental 1 

to the preceding directives and applies more specifically 5. 

to SIOP-ESI, as described herein. - 

c. (U) The Joint Chiefs of Staff consider the information ± 

g 

described in subparagraph 3b and paragraph 4 to be an — 

9 

extremely high-level enemy intelligence collection target. - 

Its disclosure to unauthorized persons could clearly — 

result in serious degradation of the effectiveness of the il 

12 

SIOP and therefore, should be designated SIOP-ESI. The — 

13 

Joint Chiefs of Staff consider that distribution of and — 

14 

access to SIOP-ESI must be strictly limited and based on — 

rigorously justified operational requirements or need to — 

16 

know and must be protected under the special access — 

17 

provisions set forth below. — 

18 

d. (U) DOD 5200. 1-R requires all Special Access Programs — 

19 

in the Department of Defense to be reviewed every 5 years — 

^ ^ 20 

to determine continued necessity. The next review of the — 

21 

SIOP-ESI Special Access Program will be accomplished in — 

22 

June 1989. — 
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2. (U) References. Documents referenced in this directive 

are listed in Annex F. 2 

3. (U) Pet init ions 3 
a, iU) SIOP Materials . Any recorded information, ^ 
royardltass of its physical form or characteristics, that ^ 
is part of the JCS SIOP or is derived from or published in ^ 
support of the SIOP and may be represented in any of the ^ 
following forms: g 

(1) (U) Written material, whether printed, typed, or g 
handwritten. iq 

(2) (U) Painted or drawn material. j^j^ 
(j) (U) Electronic or magnetic recording, punchcards, ^2 
or paper tape. 

(4) (U) Sound recordings. 

(5) (U) Photographs. I5 

(6) (U) Reproductions of the foregoing by whatever 
process. 

(7) (U) Materials used in reproduction of the foregoing ^g 
(e.g., typewriter ribbons, copying machine belts, etc.) ^9 

^* SIOP-ESI . Detailed TOP SECRET information and 2O 

material of such an extremely sensitive nature that its 2I 

22 
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cotnproraise would seriously de9ra<3e the eEf ectiveness of 
the SIOP. Paragraph 4 below discusses specific kinds of 
information tliat are considered to be SIOP-ESI. 

c. (U) JCS SLOP Documents . The JCS SIOP (Basic) and 
annexes, appendices, and tabs thereto, and associated 
source data. 

d. (U) Joint Strategic Target Planning Staff SIOP 
Documents . Documents published by the Joint Strategic 
Target Planning Staff (JSTPS) in support of the JCS SIOP. 

e. (U) SIOP Briefings . Any briefing that includes 
detailed extracts of SIOP information derived from 
material described as SIOP material in subparagraphs 3a 
through 3d above and paragraph 4 below. 

(U) Identification of SIOP-£SI 
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8 
9 

10 

;11 

i 

.12 

i 

113 

;i4 

15 
16 

17 
18 
19 
20 

21 
22 
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b. (U) The following JCS and JSTPS documents, because the 
level/amount of detail meets the criteria of subparagraph 
4a above, are considered to be extremely sensitive and are 
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designated, in their entirety, as SIOP-ESI docaments. ^ 

(1) (U) JSTPS AC&S Consequences of Execution with Tabs 2 
and SRF Damage Analysis. 3 

(2) (U) Appendix III to SIOP Annex E (Coordinating ^ 
Instructions). 5 

(3) (U) SIOP Annex F (Strike Assignments and Force ^ 
Timing) and Appendices I, II, III* IV, and V thereto. ^ 

(4) (U) JCS SIOP Summary, SIOP Annex F (Strike g 
Assignments and Force Timing). ^ 

(5) (U) JCS SIOP Decision Han«Jbook (Black Book). 

(0) (U) JCS Emergency Action Procedures, Volumes II and 

IV. 12 

(7) (U) SIOP Revision Reports. 13 

(8) (U) Consolidated SIOP Analysis Document. 

NOTE: Information extracted from these or any SIOP- 15 
ESI document is considered to be SIOP-ESI until 
such time as it has been reviewed by an 
individual who has been tJesignated as an 

original TOP SECRliT class i 1 icat ion autliority in 19 

accordance with DOD 5200. 1-R and determined not 20 

to meet the criteria for SIOP-ESI stated in 2I 

subparagraph 3b above. 22 
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(U) Reconnaissance data are not SIOP-ESI. 



(U) Agencies responsible for SIOP wargaming and 



1 




4 

' 5 



6 

i i 
10^ 

: 12 

! 13 
' 14 

lii 

16 

■ 17 
i ™ 

; 18 

: 11 

20 
21 
22 
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exercises will consider the followin«j: ^ 

2 
3 
4 
5 
6 
7 
8 
9 

10 

; 11 

* ii 

; il 
i 14 

i ii 

(2) (U) The JSTPS and J-8 SLOP war jame reports will be 
classified TOP SfiCRET and marked SIOP-£SI Category XX X8 
when they include information described in subparagraph x9 

* 20 

*SM-81-77, 1 Feb 77, "Basic Policy Guidance on Wargaminij (U)" 21 

22 
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4a above. Upon completion, war game reports involving i 

the Slop will be submitted to the Joint Chiefs of Staff 1 

for review and approval. An integral part of the 2 

approval procedures for such reports will be the review £ 

and approval of the classification assigned by the 5_ 

originator. Reports can be released in accordance with §. 

the provisions of JCS MOP 39, subparagraph 2a(2) as JCS Z 

papers or paragraph 6 of this directive as appropriate. ?. 

(3) (U) The use of SIOP-ESI data in the play of command 2. 

post exercises and other war plan exercises is not 12. 

authorized without the approval of the Director, Joint il 

Staff. The Director for Operations, Joint Staff, shall il 

review such requests and submit recommendations to the — 

Director, Joint Staff, for approval. il 

f. (U) The listing delineated by subparagraphs 4a through li. 

4e above is not to be construed as limiting or all i£ 

inclusive, nor will the listing be maintained in a current iZ 

status by changes to this directive. U. 

5. (U) Security Classification and Marking 12. 

a. (U) AH Slop «locuments shall be classified and marked 

in accordance with DOD 5200. 1-R. Documents containing — 

22 
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SIOP-ESX, as defined and described in paragraplis 3 and 4 
above, shall bear additional markings, as prescribed 
herein. 

b. (U) SIOP-ESI documents shall be classified TOP SECRET 
only. In order to permit immediate and positive identifi- 
cation of these documents, the indicator "SIOP-ESI 
Category XX" (i.e., 01-10) shall be prominently affixed to 
the front and back cover. This indicator shall also be 
applied to compilations of documents which, although not 
SIOP-ESI individually, may, in the aggregate, be so 
considered. 

c. (U) Correspondence, reports^ studies, messages, and any 
other media relaying SIOP-ESI shall include the following 
statement : 

"This (correspondence, memorandum, report, etc.) 
contains SIOP-ESI Category XX data. Access lists 
govern internal distribution." 

d. (U) Messages containing SIOP-ESI shall include the 
designator "SPECAT" and the indicator "SIOP-ESI Category 
XX" with the Category number spelled out, for example 
"SPECAT SIOP-ESI CATEGORY ONE," at the beginning of the 
message text immediately following the message 
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classification, in accordance with ACP 121 US Supp-1 i 

(Series), followed by the statement in subparagraph 5c 2 

above. Supporting telecommunications centers will 3 

distribute SIOP-ESI messages based on the SIOP-ESI 4 

category number and access/distribution lists provided by 5 

recipients of SIOP-ESI message traffic. 6 



i i 

\ I i 

I !i 

: u 
12 

: 13 

14 

15 
16 

17 
18 
19 



i 



* MJCS-273-83, 23 December 1983, "Guidance for the Sanitiza- 2£ 
tion and Distribution of SlOP Information to SACEUR and 
S AOL ANT'* 21^ 

22 
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i 1 

i 

' 2 

li 

3 
5 

f. (U) r\ic SIOP-ESI indicator is NOT a separate security ^ 
classitication. This indicator is intoiiJed solely as a ^ 
mechanism for identifying SlOP-extremeXy sensitive ^ 
information that must be controlled in accordance with the ^ 
special access procedures established by this directive. 
Care must be taken to ensure that the SIOP-ESI indicator 

is applied to documents only when the contents contain 

information of the type and quantity set forth in ^ 
paragraphs 3 and 4 above. Indiscriminate use of the SIOP- 

ESI indicator will result in unnecessary additions to ^ 

access rosters and undue restrictions on processing of ^ 
documents, whicn could ultimately result in lessened 

security. 1£ 

g. (U) SIOP documents, except those sanitized and ^9 
authorized for release to NATO under the provisions of 2£ 
MJCS-273-83 shall be labeled "Not Reieasable to Non-US 21 
Agencies Without Permission of the Originator." 22 
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(U) Distribution of SIOP Material and Extracts 
a. (U) The Director for Operations, Joint Staff, OJCS, 
will review the requirements of all users of the JCS SIOP 
prior to the publication of each SIOP and report 
recommended distribution lists will be included in the 
promulgating directives for each SIOP. 

(1) (U) Requests to change approved distribution lists 
will bo submitted, with justification, to the Director 
for Operations, Joint Staff, OJCS. The Director for 
Operations, Joint Staff, will forward his consideration 
and recommendations to the Director, Joint Staff, who 
is authorized to approve/disapprove such requests. The 
Director of Strategic Target Planning (DSTP) will be 
notified of approved changes. 

(2) (U) Requests to change the number of copies 
provided by approved distribution lists will be 
submitted, with justification, to the DSTP. After 
informal coordination with the Director for Operations, 
Joint Staff, DSTP is authorized to approve/disapprove 
such requests. 

b. (U) The DSTP is authorized to make distribution of JCS 
SIOP materials for each major revision or update to the 
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SIOP under the provisions of subpara<jraph 6a above, with 
the following stipulations: 

(1) (U) Unless an exception is stated in the approved 
distribution lists, as provided in subparagraph 6a 
above, or amended under the provisions of subparagraph 
6a(l) or 6a(2) above, JCS SIOP materials distributed by 
the DSTP will contain only those data necessary for the 
accomplishment of the assigned tasks, missions, and 
responsibilities of the addressee. 

(2) (U) SIOP-ESI magnetic tapes will be distributed to 
users within the Washington, D.C., area as follows: 

(a) (U) The DSTP will forward one copy of each 
required tape to The Joint Chiefs of Staff, 
Attention: J-3 Nuclear Warfare Status Branch 
(NWSB}# and one copy to the Joint Coordination 
Center (JCC), Fort Ritchie, Maryland. 

(b) (U) The Director for Operations, Joint Staff, 
will reproduce tapes, as required, to satisfy the 
approved requirements of users in the Washington, 
D.C., .icoa. Tlie JCC will, use its coijy of tapes 
provided to support JCS requirements delineated in 
JCS Pub 6, Volume II, Part 1. 



1 
2 
3 
4 
5 
6 
7 
8 
9 

10 

n 

12 
13 
14 
15 

ii 
17 
18 
19 
20 

22 
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(c) (U) Requests by approved users for reproduced ^ 

tapes or portions or printouts thereof will be ^ 

submitted to the Director for Operations, Joint ^ 

Staff, who is authorized to approve/disapprove such ^ 

requests. ^ 

c. (U) The DSTP is authorized to make distribution of ^ 

JSTPS SIOP materials as follows: ^ 

(1) (U) All JSTPS SIOP material to: g 

(a) (U) The Chief of Staff, US Army; the Chief of ^ 
Naval Operations; the Chief of Staff, US Air Force; 
and the Commandant of the Marine Corps. 

(b) (U) OJCS. 12 

(c) (U) Commands designated by the Joint Chiefs of 

Staff. 14 

(2) (U) Distribution of JSTPS SIOP materials to the 
commands or agencies not covered in subparagraphs 6a 
through 6c(l) will be considered on a case-by-case 

basis. Requests will be submitted to the DSTP with ig 

sufficient justification to complete an appraisal. The i^ 

DSTP may approve such requests as are considered 20 

necessary for effective operations. Requests not 21 

22 
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favorably considered by the DSTP will be forwarded to ^ 
the Director for Operations, Joint Staff, for review ^ 
and action. 3 

d. (U) Requests for copies of changes to the distribution ^ 
schedule for the SIOP publication, "JSTPS Air Defenses ^ 
Handbook," will be forwarded to tne DIA Dissemination ^ 
Center. -j 

e. (U) The Chairman, Joint Chiefs of Staff, consulting the ^ 
other Joint Chiefs of Staff, as appropriate, will approve/ ^ 
disapprove requests for SIOP documeh tg from thp White 

^ouse and members of the Senat e and House o_ f 

Representative s . 3^2 

f. (U) Requests for release o f STOP documents to foreign 
nationals will be submitted to the Director for 
Operations, Joint Staff , for review and recommendations to 
the Joint Chiefs of Staff, except as noted below, 

(1) (U) The DSTP. is authorized, in coordination with 
the SACEUR Senior Representative (SACEUR Rep) to the 
JSTPS, to disclose US classified information, relative 
to current and subsequent SIOPs, to SACEUR and the 
SACEUR Rep to JSTPS, pursuant to, and in accordance jl 

22 
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with, the policies contained in NDP-1* and JAIEG Case ^ 

N-15/75P.** 2 

(2) (U) Similarly and in accordance with the same 3 
policies, the DSTP is authorized to disclose such SIOP 4 
information to SACLANT as is essential for adequate 5 
understanding and effective coordination of nuclear g 
forces planning. 7^ 

(3) (U) Procedures for handling us SIOP information 3 
within NATO is contained in Annex B to Attachment 1 of 9 
USSAN Instruction 1-69 (DOD 5700.55, End 2), "United ^ 
States Implementation of NATO Security Procedures (U)" 

g. (U) Recipients of SIOP documents are authorized to 12^ 

extract and reproduce portions thereof for such use or 13 

dissemination to lower echelons as may be required for 14 

accomplishment of assigned tasks, missions, and 15 

responsibilities. Reproduction of SIOP document extracts 16 

17 

* NDP-1, 9 Sep 81, "National Policy and Procedures for the 18 
Disclosure of Classified Military Information to Foreign 

Governments and International Organizations (National Dls- 19 
closure Policy)" 

** Joint Atomic Information Exchange Group (JAIEG) memorandum — 
JAIEG Case N-15/75F, 10 Dec 75, "Authorization and^ Release 

Procedures for SIOP ATOMAL Information to NATO (U)' — 

22 
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shall, in every case, be on a rigidly discriminating basis ^ 
and shall be controlled in accordance with applicable ^ 
directives, including this directive. ^ 
h. (U) Special procedures for processing extracts from ^ 
SIOP-ESI documents are as follows: ^ 

(1) (U) Release of SIOP data to foreign nationals is ^ 
prohibited, except as authorized under the NATO ^ 
Documents Program and as approved by the Joint Chiefs ^ 
of Staff. The release of SIOP-ESI data to ^ 
SACEUR/SACLANT is discussed in subparagraph 6f above. 

(2) (U) When extracts are made from SIOP-ESI material 
or when portions of SIOP-ESI material are reproduced, 
meticulous consideration shall be given to the deter- 
mination of appropriate classification and 
identification. It is of particular importance to 
determine whether or not such extracts, or portions 
reproduced, retain characteristics of the type and 
quantity delineated in paragraphs 3 and 4 above and 
should be identified as SIOP-ESI. 19 

i. (U) Requests for JCS SIOP documents not covered by 20 
subparagraphs 6a through 6h above will be submitted, with 21 
justification, to the Director for Operations, Joint 22 
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staff, who will forward the requests and his i 

recommendations to the Director, Joint Staff. The j 

Director, Joint Staff, consulting the Chairman, Joint 3 

Chiefs of Staff, as appropriate, will approve/disapprove ^ 

these requests. 5^ 

j. (U) Recipients of JCS or JSTPS SIOP documents/materials g 
will' check the documents/materials for completeness and 

will return all receipts within 72 hours of receipt, £ 

reporting immediately any discrepancies noted to 9 
recipient's parent command. Parent commands will inform 

the originating agency within 24 hours after being 11 

notified in the event the discrepancy ( ies) cannot be 12 

resolved. i2 

7. (U) Inventory and Sighting 1£ 

a. (U) All SIOP materials defined and identified in 15 
paragraphs 3 and 4 above will be inventoried annually, as 

a minimum, or more frequently, as prescribed by the 17 

classified material control procedures of the appropriate 10 

Service, joint agency, or command, except as specifically 19^ 

provided in subparagraph 7b below. 20 

b. (U) SIOP documents that are effective for a single SIOP 21 
revision cycle or less will be controlled by document 22 
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receipt/certificate of destruction procedures in ^ 

accordance with applicable Service and joint agency 2 

security directives. These documents shall be destroyed ^ 

within 30 days of supersession. Certificates of ^ 

destruction shall be maintained as directed by the 5 

security directives of tho appropriate Service, joint g 

agency, or unified and specified command. Command ^ 

internal inspection procedures will be established to g 

ensure rigid adherence to those procedures. 9 

c. (U) The DSTP and other originating agencies shall iq 
annually, as of 30 September, provide holders a list of 11 
documents as follows: 12^ 

(1) (U) The basic SIOP and major collections of its 13 
annexes (i.e., annexes and appendices maintained at i£ 
Service, joint agency, and unified and specified 15 
command level). 16 

(2) (U) All documents not covered in subparagraph 7c(l) u 
above that contain SIOP-ESI. 18 

Documents controlled in accordance with subparagraph 7b 19^ 

above will be exempt from this requirement, 2£ 

d. (U) Upon receipt of this listing, holders shall verify 2I 
the listing, sight listed documents, and certify the 22 
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sighting to the originator, who in turn will forward a 
consolidated sighting report of each such annual sighting 
to the Secretary Joint Chiefs of Staff. Discrepancies, 
if any, shall be handled separately in accordance with 
paragraph 16 below and reported to the Director, Joint 
Staff. 

e. (U) To facilitate this inventory and sighting and to 
provide the maximum security, holders of SIOP-ESI material 

should provide for central control of such documents. 
(U) Access Control 

a. (U) Control of Access to Non-ESI SIOP Information . 
Access to SIOP information not identified as SIOP-ESI will 
be controlled in accordance with standard security 
procedures governing access to classified information. It 
is not considered necessary to establish any special 
controls over access to these data. 

b. (U) Control of Access to SIOP-ESI Information . Access 
to SIOP information designated SIOP-ESI shall be subject 
to special control procedures. Services, joint agencies, 
and commands holding or authorized to hold SIOP-ESI data 
are requested to provide implementing instructions for the 
special control procedures outlined below. 
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UNCLASSIFIED 



S.h' (1) (U) Access to SIOP-ESI shall be highly restricted 
and granted on a selective and discriminating need-to- 



TEMPORARY. 

(a) (U) Permanent Access . After considering the 
functions of a given duty position, the frequency 



3 

know basis in accordance with the guidance set forth in — 

4 

subparagraph Ic above. This is especially true of the — 

5 

SIOP decision and execution process. — 

6 

(2) (U) Tliere may be two types of access, PERMANENT and - 

7 

8 

9 



10 

of anticipated access, and the categories of SIOP- — 

. . 11 

ESI access required, access granting authorities — ~ 



12 
13 
14 



listed in subparagraph 8c below may establish 

permanent SIOP-ESI billets. Although a person 

assigned to a permanent SIOP-ESI billet needs no 

15 

further authorization for access to the categories — 

16 

of SIOP-ESI specified for the billet, holders of — 

17 

SIOP-ESI information must still verify a valid — 

18 

need-to-know before releasing SIOP-ESI information. ~ 

19 

PERMANENT ACCESS BILLETS WILL BE REVIEWED AND — 

20 

REAPPROVED BY ACCESS -GRANTING AUTHORITIES LISTED IN — 

21 

SUBPARAGRAPH 8c BELOW NOT LATER THAN 31 DECEMBER IN — 

22 

EACH EVEN-NUMBERED YEAR. 
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€ ; ecret 



(b) (U) Temporary Access . Access-granting i 
authorities listed in subparagraph 8c below may - 
grant approval for temporary access, up to 1 year, - 
for personnel involved in briefing, studies, or - 
other activities that have a projected end date. - 
S» (3) (U) Criteria for Access . Normally, military - 

personnel and civilian personnel subject to the 
provisions of the personnel policies of the Office of 
Personnel Management (OPM) and Department of Defense 
may not be authorized permanent or temporary access to 

11 
12 
13 
1£ 
15 
16 

17 
18 
19 
22 
21 
22 



SIOP-ES I unless they meet the basic eligibility 
criteria set forth below ; 

(a) (U) The individual shall be a US citizen^ 

(b) (U) The individual shall have a f inal TOP 
SECRET clearance granted in accordance with the 
policy and criteria prescribed in DOD 5200. 2-R, 

(c) (U) The individual shall have been the subject 
of a pomoleted special background investigation 
(SBI ) that meets the criteria set forth in DOD 
5200. 2-R or other types of background 
investigations listed in DOD 5200. 2-R that are 
equivalent to an SBI. 
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Ijj) Access for these individuals must be essential to the 
performance of their assigned duties and justified by 
their direct involvement in the review, development, 
maintenance, or implementation of the STOP. 

(4) (U) Those personnel previously granted, access to 
SIOP-ESI based upon a background investigation (BI) 
that did not contain all of the elements of an SBI as 
set forth in DOD 5200. 2-R shall be the subject of an 
SBI when a reinvestigation is requested for any reason, 
such as the development of adverse or questionable 
information or when a break in the period of access or 
Federal service exceeds 12 months. 

(5) (U) Waiver of Access Criteria . When justified by 
compelling need: 

(a) (U) A waiver of the basic eligibility 
requirement stated in subparagraph 8b{3)(b) above 
may be authorized by those access-granting 
authorities listed in subparagraphs 8c(l) through 
8c(5) below for military personnel and civilian 
personnel subject to 0PM and DOD personnel 
policies. This authority may not be delegated. 
Waivers should be approved only if the individual 



1 
2 
3 
4 
5 
6 
7 
8 
9 
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U 
12 
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16 
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concerned meets all the following criteria: ^ 

1. (U) Is being assigned to a position for 2 
which permanent access to SIOP-ESI is required. 3 

2. (U) Already possesses an interim TOP SECRET 4 
clearance granted in accordance with the policy 5 
and criteria prescribed in DOD 5200. 2-R. g 
2l, (U) Has been administered a screening 7 
interview equivalent to that which is used to 3 
screen nominees for access to Sensitive 9 
Compartmented Information (SCI), 10 
4.. (U) Has an SBI initiated. n 

(b) (U) A waiver of the basic eligibility 12 

requirement stated in subparagraph 8b(3)(c) above 13 

may be authorized for military personnel and 14 

civilian personnel subject to 0PM and DOD personnel 15 

policies. Such waivers must be approved by flag 16 

officer-level, access-granting authorities as 17 

authorized in subparagraphs 8c and 8d below. In ig 

cases where a flag officer is not routinely 19 

available to the unit and delays in processing will 20 

result in unacceptable operational delays in 21 

assigning personnel to SXOP-related duties, this 22 
authority may be delegated in writing to 0-6 level 
operational unit commanders (i.e. Submarine 
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Squadron Cotrunanders , Wing commanders, or ^ 

equivalent). To be granted a waiver, the 2 

individual concerned must meet all of the following 3 

criteria: 4 

1. <U) Is being assigned to a position for g 

which permanent access to SIOP-ESI is required. 6 

Z. (U) Already possesses a final TOP SECRET j 

clearance that was based on a standard BI that 8 

meets the investigative standards of 9 

paragraph 2, Appendix B, DOD 5200. 2-R. 10 

1. (U) Has an SBI initiated. 11 

(c) (U) Approval of waivers for contractor 12 

personnel will be made only by the Chairman, Joint 13 

Chiefs of Staff. 14 

(6) (U> Flag-officer level, access-granting 15 

authorities, as authorized in subparagraphs 8c and 8d 16 

below, may approve temporary access to SIOP-ESI 17 

information for briefings, working meetings, etc., for 18 

personnel who do not have a completed SBI as required 19 

by subparagraph 8b(2), provided all of the following 20 

criteria are met: 21 

(a) (U) Access is essential to the performance of 22 
duty and the individual is directly involved in the 
review, development, maintenance, or implementation 
of the SIOP. 



27 

(Ist N/H) 



Appendix 



(b) (U) The individual meets the other basic 
eligibility criteria specified in subparagraphs 
8b(3}(a) and 8b(3)(b) above. 

(c) (U) The individual is subject to military, 0PM, 
or DOD personnel policies. 

(7) (U) Civilian personnel not subject to provisions of 
0PM or DOD personnel policies (i.e., contractor 
personnel) will not normally be granted access to 
SIOP-ESI. Such civilian personnel shall not be granted 
permanent access to SIOP-ESI but may be granted 
temporary access for periods not to exceed 1 year. 
Requests for temporary access for such civilian 
personnel shall be referred to the Director, Joint 
Staff, for appropriate action. Personnel in this 
category for whom temporary access is approved shall 
possess a final TOP SECRET clearance and shall meet the 
basic security eligibility requirements of DOD 
Instruction 5220.28. 

(8) <U) Prior to being granted permanent access, all 

personnel will be briefed on the contents of this 
directive and any supplemental directives considered 
appropriate. Once granted, continued access by 
individuals will be based on security assurance 
measures established by the granting authority. Upon 
termination of access, appropriate debriefing must be 
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(U) accomplished. These briefings will emphasize the 
individual's continuing responsibility for the 
protection of information obtained as a result of his 
access. To satisfy these requirements, each individual 
who is granted permanent SIOP-ESI access will execute 
an appropriate briefing/debriefing certificate, which 
will be maintained for a minimum of 1 year after the 
debriefing of an individual by the command granting 
access. These same requirements apply to personnel 
granted temporary access to SIOP-ESI, except as noted 
in subparagraph 12h below, 
^.fc' (9) (U) OJCS, Services, unified and specified commands. 
Defense agencies, and JSTPS will: 

(a) (U) Develop procedures to maintain, at an 
appropriate level, SIOP-ESI access listings of 
personnel categorized by military, DOD civilian, 
and industrial contractor personnel. These 
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listings will be current as of the last day of each 
quarter and will contain, at a minimum: billet 

20 

number, name, rank/grade, social security number ~" 

21 

(SSN), office/activity/unit designator, category of 
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access, travel/duty restrictions (if applicable), 
and authorization document. Annex B is an example 
of a personnel access roster. Such lists shall be 
marked: "Subject to the Privacy Act of 1974 (5 
use, Section 552a)." 



(b) (U) Be prepared to provide a numerical count of 
personnel having SIOP-ESI access within 5 working 
days after request, in the categories specified in 
subparagraph 8b(9)(a) above, to the Directorate for 
Information and Resource Management, OJCS, ATTN: 
Security Division. In any case, such a numerical 
report will be provided by 31 January of each 
calendar year. Close-out date for the report will 
be 31 December of the preceding year. To preclude 
duplication in recording, the following 
instructions apply: 

1. (u) Services will record all personnel not 
assigned to the OJCS, Defense agencies, or to 
the staffs of unified and specified commands. 

2. (U) Unified commands will record assigned 
headquarters personnel only. 

3. (U) US Element NORAD and the specified 
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({)) commands (US Space Command, MAC, and SAC) will 
divide personnel into two categories: 
headquarters and all others. 

4. (U) JSTPS will record single-status and 
Scientific Advisory Group personnel. 

5. (U) Guidance for recording of personnel in 
OSD, OJCS, non-DOD agencies, and the Defense 
agencies will be provided by a Joint 
Administrative Instruction. 

3,b • (10) (U) The categories of SIOP-ESI listed in Annex A 
shall be used for access control. 
(11) (U) Internal inspection procedures will give 
special and continuing attention to safeguards for 
SIOP-ESI, 

^c. (U) Authority to establish billets and grant access to 
SIOP-ESI is delegated to ; 

(1) (U) The Director, Joint Staff, for civilian 
personnel of the White House, members of the Senate and 
House of Representatives, and their staffs. Requests 
must be submitted to the Director a minimum of 7 work 
days prior to the date the access is required. 

(2) (U) The Director, Joint Staff, for the Joint Chiefs 
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^OlJ of Staff, members of the OJCS, other Joint Staff 

agencies. Defense agencies, military personnel assigned 
to the White House and National Security Council 
Staffs, OSD, civilian personnel not subject to the 
provisions of 0PM or DOD policies (i.e., contractor 
personnel), and others as may be authorized by the 
Joint Chiefs of Staff. These requests must be 
submitted to the Director for Operations, Joint Staff, 
a minimum of 7 work days prior to the date the access 
Is required. 

(3) (U) The Chief of Staff, US Army? the Chief of Naval 
Operations; the Chief of Staff, US Air Force; and the 
Commandant of the Marine Corps for members of their 
respective Services and departmental staffs, and 
personnel assigned to the offices of the Secretaries of 
the Military Departments. 

(4) (U) Commanders of unified and specified commands 
having responsibility for planning, preparation, 
coordination, and execution of the SIOP, for members of 
their staffs and subordinate command, and military 
personnel assigned to agencies directly supporting the 
CINC's SlOP-related missions. 
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(5) (U) The Director of Strategic Target Planning for 
members of the JSTPS. 

d. (U) Access to SIOP data, including SIOP-ESI, normally 
shall not be given to foreign nationals, including members 
of NATO, except as authorized by the Joint Chiefs of 
Staff, Procedures for access to US SIOP data released to 
NATO in accordance with subparagraph 6f above are 
contained in Annex B to Attachment 1 of USSAN Instruction 
1069 (DOD 5100.55, Enclosure 2). Access to SIOP-ESI data 
by US personnel assigned to NATO military organizations/ 
agencies normally will be restricted to those sanitized 
data allowed to be provided under the provisions of MJCS 
273-83. US personnel assigned to NATO military 
organizations/agencies who are also members of USEUCOM or 
LANTCOM may be authorized access to other SIOP-ESI by 
USCINCEUR or USCINCLANT. US personnel assigned to NATO 
military organizations/agencies who are not also members 
of USEUCOM or LANTCOM may be authorized access to other 
SIOP-ESI by USCINCEUR. 

e. (U) The authority to grant access delegated in sub- 
paragraph 8c above may be further delegated to 
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(ij) appropriate subordinates. Such further delegation shall - 

2 

be held at the highest rank and restricted to the minimum — 

3 

number of appropriately cleared individuals, consistent — 

4 

with operational requirements. - 

f. (U) Requests for SIOP-ESI access not covered above will - 

be submitted to the Director for Operations, Joint Staff, — 

who will forward the request and his recommendations to the — 

8 

Director, Joint Staff. The Director, Joint Staff, - 

9 

10 
11 
12 
13 

il 

ii 
16 



consulting the Chairman, Joint Chiefs Staff, as 

appropriate, will approve/disapprove these requests. 

9. (U) Travel: Persons granted access to SIOP-ESI incur a 

special security obligation and must be aware of the risks 

associated with travel to or through hostile countries. 

SIOP-ESI-cleared personnel must be warned of the risks 

associated with capture, interrogations, harassment, 

entrapment, or exploitation by hostile nations or groups. 

17 

Hazardous activities comprise assignments, visits to, travel — 

18 

through, and use of vessels owned or controlled by hostile 

19 

countries, as well as assignment or travel in combat zones or ~ 

20 

other areas where hostilities or terrorist activities are 

21. 

taking place, duties behind hostile lines, and duties or 

22 
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travel in isolated or exposed areas where individuals cannot 
reasonably be protected against hostile action. Individuals 
also must be advised of the potential for terrorism and the 
active and passive measures to avoid becoming a target or 
inadvertent victim of a terrorist act. 
9, a. (U) Official Travel ; All SIOP-ESI cleared personnel 

performing official travel outside the United States must 
receive a security/anti-terrorist briefing and or risk of 
capture briefing. 

b. (U) Unofficial Travel ; All SIOP-ESI-cleared personnel 
performing unofficial travel to or through hostile 



1 
2 
3 
4 
5 
6 
7 
8 
9 

10 
11 



12 

countries must comply with the provisions below. Failure — 



to comply with these provisions may result in the 
withdrawal of approval for continued access to SIOP-ESI. 

(1) (U) Give advance notice of such planned travel to 

local security officer. 

(2) (U) Obtain anti-terrorism briefing from the 
security officer prior to performing such travel. 

(3) (U) Immediately contact the nearest US Consul » 
Attache, or Embassy Regional Security Officer or Post 
Duty Officer if detained or subjected to significant 
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by personnel who will require access to SIOP-ESI data, the 
headquarters to be visited will be notified of the category 
of SIOP-ESI to which each individual is authorized access. 
This certification is in addition to the requirement to 
certify appropriate security clearances. 
11. (U) Visits to JSTPS 

a- (U) Requests for visits to JSTPS by civilian personnel 
of the White House, members of Congress, and Congressional 
Staff members will be submitted to and be reviewed and 
approved by the Director, Joint Staff. 
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(p) harassment or provocation while traveling. 

(4) (U) Report to the specified official upon return 
from travel any unusual incidents, including incidents 
of potential security concern, encountered during such 
travel. 

c. (U) SlOP-cleared individuals whose access is being 
terminated will be officially reminded of their continuing 
obligation to protect SIOP-ESI and will be informed of the 
risks associated with hazardous activities. After SIOP- 
ESI access is terminated, provisions of paragraph b no 
longer apply. 

10. (U) Visits Requiring Access to SIOP-ESI . Prior to visits — 
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(U) All Other requests for visits, except working level, will 
be sent to the Director for Operations, Joint Staff, for 
approval. The Director for Operations, Joint Staff, will 
approve /disapprove or forward as appropriate to the 
Director, Joint Staff, visit requests for individuals 
possessing appropriate clearances and a valid need-to- 
know. 

f/, b. (U) All requests for visits should be submitted a 

minimum of 7 working days prior to the visit. The timely 
submission of requests is necessary to provide sufficient 
time for adequate staffing within the Joint Staff. 
Requests should contain a detailed justification for the 
visit, type of information/briefing requested, point of 
contact at JSTPS, and recommendations on the appropriate 
type /classification of briefing to be given, 
c. (U) Members of the Service or CINC staffs who are 
directly involved with SIOP development/support/implemen- 
tation should contact the Joint Secretariat, JSTPS, 
directly for working-level visit approval. Other 
individuals from outside agencies possessing appropriate 
SIOP clearances who wish to visit JSTPS for working-level 
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meetings need only to notify J-3, Strategic Operations 
Division, of visit intentions. 
12. (U) SIQP Briefings 

a. (U) SIOP briefings may be given to those personnel 
under the control or military jurisdiction of the Joint 
Chiefs of Staff or of the Chief of Staff, US Army; the 
Chief of Naval Operations; the Chief of Staff, US Air 
Force; or the Commandant of the Marine Corps. Access for 
these individuals must be essential to the performance of 
their assigned duties and justified by their direct 
involvement in the review, development, maintenance, or 
implementation of the SIOP. Personnel who do not fall 
into this category require specific approval as indicated 
below. 

b. (U) The SIOP shall not be used as a vehicle of 
instruction at joint or Service schools or other similar 
instructional institutions. Special SIOP briefings given 
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. 18 

to joint or Service schools shall not contain SIOP-ESI and — 

19 

will be classified TOP SECRET. Attendance of foreign — 

20 

personnel at these briefings is prohibited. SIOP 

21 

briefings for the joint colleges may be scheduled and 

22 
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conducted on a mutually acceptable basis through direct 
coordination between DSTP and the cognizant commandant. 
The Chiefs of the Services will provide approval of such 
requests from Service schools over which they exercise 
cognizance . 

<=• (U) SIOP briefings normally shall not be given to 
foreign nationals, including members of NATO. The 
Director, Joint Staff/ may approve briefings for military 
members of NATO, provided the briefing is sanitized in 
accordance with MJCS 2 73-83, Other requests for SIOP 
briefings for foreign nationals may be approved by the 
Joint Chiefs of Staff. 
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d. (U) The Chairman, Joint Chiefs of Staff, consulting the — 

other Joint Chiefs of Staff, as appropriate, will approve/ — 

disapprove requests for SIOP briefings for civilian ^ 

16 

personnel of the White House and members of the Senate and ~~ 

House of Representatives. — 

18 

e. (U) Briefings on the SIOP Revision Report and War Games — 

19 

Report or briefings based on these reports may not be ~" 

20 

given except as provided in the foregoing subparagraphs or ^ 

21 

as approved in accordance with the provisions of JCS MOP 

22. 

39 and this directive, as appropriate. 
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£. (U) Requests for SIOP briefings not covered above will 
be submitted to the Director for Operations, Joint Staff, 
who will forward the request and his recommendations to 
the Director, Joint Staff. The Director, Joint Staff, 
consulting the Chairman, Joint Chiefs of Staff, as appro- 
priate, will approve/disapprove these requests. 

g, (U) An approved attendance List will be prepared to 
control entry to SIOP briefings containing SIOP-ESI. 

h. (U) Persons attending SIOP briefings containing SIOP- 
ESI must meet the criteria for eligibility for access to 
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SIOP-ESI as specified in subparagraphs 8b(3), (5), and (6) — 

12 

above. Persons granted temporary access to SIOP-ESI to — 
attend a briefing need not complete a brief ing/debriefing 
certificate as required by subparagraph 8b{8; above, 

15 

provided the briefing contains appropriate oral and visual — 

16 

warning regarding the sensitivity o£ the data in the 

17 

briefing. 

18 

13. (U) Training. It is recognized that operational commands 

X9 

must conduct SIOP training in order to accomplish their stra- 

20 

teglc operational missions effectively. In this context, 

21 

SIOP indoctrination is required by many operational 

22 

personnel . 
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The policy guidelines for SIOP indoctrination are as follows: 1 

a. (U) Access shall be strictly controlled on a need-to- 2^ 
know basis. 1, 

b. (U) Attendance at indoctrination briefings will be £ 
restricted to those personnel actually assigned to or 5 
en route to operational billets that require access to 6 
SIOP information. 1 

c. (U) Indoctrination courses may be conducted at opera- 8 
tional commands that hold SIOP documents or at those 2. 
appropriate training facilities that are under the direct 10 
supervision/control of the component commanders of the 
several unified and specified commands. Curricula and 12_ 
associated material shall be approved by these commanders. ii 

d. (U) The SIOP may be used as a vehicle of instruction ii 
provided that the precise area of indoctrination is il 
correlated with billet requirements. 11 

14. (u) Telecommunications System Processing of SIOP-ESI 17 

a. (U) Special Category (SPECAT) SIOP-ESI Special Handling ii 

Designator . To preclude delivery of SIOP-ESI message H 

traffic to a SPECAT terminal that is not specifically 20 

approved to receive SIOP-ESI messages, communications 21^ 

22 
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systems shall apply a special handling designator in the i 
security field of the communications heading of all 
electrically transmitted SIOP-ESI messages to enable 
automatic switch comparison of the SIOP-ESI designator 
against the destination security level authorization. A 
designator indicating SIOP-ESI has been established and is 
promulgated in ACP 121 US Supp-1 (Series). Message 
originators must include this designator in all SIOP-ESI 
messages (see paragraph 5d). Commanders having 
responsibility for terminals authorized to receive SPECAT 
(less SIOP-ESI) messages will ensure that adequate 
debriefing procedures are established in the event of 
inadvertent delivery of a SIOP-ESI message to the terminal 
affected. 

b. (U) Connection of an ADP System that Proce sses SIOP-ESI 
to a Telecommunications System . An ADP system processing 
SIOP-ESI in accordance with the provisions of Annex C may 
be connected to telecommunications systems such as AUTODIN 
or other nondedicated telecommunications systems only when 
approved by the Joint Chiefs of Staff. Requests for 
approval to make such connections should be forwarded to 
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the Director for operations, Joint Staff, OJCS. Requests i 

should address as a minimum: 2^ 

(1) (U) The procedures to be followed to ensure the 3 
safeguarding of SIOP-ESI. £ 

(2) (U) Interface design features that will ensure the 5 
safeguarding of SIOP-ESI. 6 

(3) (U) The results of evaluations of the interface 7 

design. £ 

(4) (U) The results of tests of the interface. 9 

(5) (U) Security findings and remaining vulnerabilities 10^ 
of security concern. 

(6) (U) How reapproval will be handled if significant 12^ 
interface redesign is required in the future. 13^ 

(7) (U) Conclusions and recommendations regarding 1£ 
security and the use of the interface to interconnect 15 
the ADP system to a telecommunications system. 1£ 

c. (u) Accreditation of Telecommunications Systems To 17 

Process SIOP-ESI . il 

(1) (U) Telecommunications systems such as AUTODIN may 19 

process and transmit SIOP-ESI data only after the 20 

system has been accredited by the Joint Chiefs of 21 

22 
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staff. Requests to accredit telecommunications systems 
to handle SIOP-ESI should be addressed to the Director 
for operations, Joint Staff, OJCS. Requests for 
accreditation should include details regarding imple- 
mentation of a security certification/accreditation 
plan and adhere to guidance outlined ini Defense 
Intelligence Agency Manuals (DIAM) 50-3, "Physical 
Security Standards for Sensitive Compartmented 
Information Facilities"; OIAM 50-4, "Security of 
Compartmented Computer operations;" and DIAM 50-5, 
"Sensitive Compartmented Information Contractor 
Administration Security." Upon development of the 
Security Certification/Accreditation Plan, it should be 
submitted to the Director for Operations, Joint Staff » 
OJCS, for review and comment by OJCS personnel. The 
plan will outline the procedures to be followed to 
ensure the safeguarding of SIOP-ESI. The plan should 
address how information security will be achieved at 
the outset and how reaccreditation will^be achieved 
whenever significant portions of system hardware or 
software are changed. The plan will also address the 
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protective features outlined in subparagraph 5g(9) of ^ 
Annex C. A suggested outline of the plan's contents is ^ 
as follows: 

(a) (U) Introduction - includes brief description 
of system, purpose, and scope of plan, 

(b) (U) Responsibilities - identifies agencies par- 
ticipating in certification and accreditation 
activity and their roles and responsibilities. ^ 

(c) (U) System Overview - includes a functional ^ 
description of the system with appropriate 
definitions of system components, interfaces, etc. 
Additionally, should address security concept, 
operational concept, maintenance concept, and 
procurement process. 14 

(d) (U) Security Problem - identifies potential 
system security weaknesses. j^g 

(e) (U) Security Approach - describes computer 
security features and communications security 
considerations. X9 

(f) Security Activities - describes actions and 20 
features implemented to ensure security. 21 

22 
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(g) (U) Description of the Accommodation Package - 
describes documents comprising recommendation 
package to include the security certification 
evaluation. 

(2) (U) Upon completion of system security activities, 
the final accreditation/certification request should be 
submitted for approval. The request should be 
accompanied by a security certification evaluation 
which addresses the following as a minimum; 

(a) (U) System security design and mode of 
operation. 

(b) (U) System security tests conducted. 

(c) (U) Security findings and remaining 
vulnerabilities . 

(d) (U) Conclusions and recommendations regarding 
security. 

15. (U) Transportation of SIOP-ESI Material 

a. (U) SIOP-ESI material not electrically transmitted via 
secured circuits shall be dispatched only by courier. The 
Armed Forces Courier Service (ARFCOS) should be utilized 
to the maximum extent feasible. Special handling 
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instructions within the ARFCOS system will be as 
prescribed by the Director, ARFCOS. Dispatching officials 
will designate the material SIOP-ESI when entering it into 
the ARFCOS system and will have the following statement 
affixed to the outside of the package or container in 
addition to the normal addresses and markings: 
"RESTRICTED HANDLING REQUIRED" 

(1) (U) Air transportation of this package will be in 
the following priority: military aircraft, regularly 
scheduled US commercial cargo aircraft, government- 
chartered commercial aircraft, regularly scheduled US 
commercial passenger aircraft (ARFCOS only). 

(2) (U) TWO COURIERS ARE REQUIRED BETWEEN US MILITARY 
INSTALLATIONS/FACILITIES. ONE COURIER CAN BE USED 
DURING FLIGHT SO LONG AS TWO COURIERS DELIVER AND PICK 
UP MATERIAL AT PLANESIDE OFF MILITARY BASES, 

(3) (U) When not attended by qualified couriers, the 
minimum security required for storage of this package 
is in a secure room supplemented by guards or an 
intrusion detection alarm system or a Class A vault 
constructed in accordance with individual Service 
directives . 
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(4) (U) COURIERS AND GUARDS MUST POSSESS TOP SECRET 
CLEARANCES BASED ON A COMPLETED BACKGROUND 
INVESTIGATION. 

b. (U) Commanders supporting ARFCOS are responsible for 
providing arrangements for the transportation of SIOP-ESI 
material by military air. Priority will be provided to 
the shipment of SIOP-ESI material to meet the deadline 
delivery date. 

c. (U) When not transported via ARFCOS, SIOP-ESI material 
being transported or processed outside military 
installations/facilities will be accompanied by two 
appropriately cleared couriers (in accordance with the 
handling restrictions delineated in subparagraph 15b 
above) assigned the primary responsibility for 
surveillance and security of the material. VThen utilizing 
authorized air transportation, as delineated in 
subparagraph 15c(l) and (2) below, one courier may be used 
during flight so long as two couriers are used to 
transport the SIOP-ESI material to and from the aircraft 
and to maintain surveillance until the aircraft is 
airborne . 

(1) (U) The following types of air transportation are 
authorized for movement of SIOP-ESI material: 
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(a) (U) Military aircraft. 

(b) (U) US contract commercial aircraft when the 
manifest is under US military control. 

(c) (U) US commercial nonpassenger cargo aircraft. 
(2) (U) SIOP-ESX material WILL NOT be transported by 
any of the following means: 

(a) (U) Commercial passenger aircraft (except for 
ARFCOS, as described above). 

(b) (U) Department of State Diplomatic Courier 
Service . 

(c) (U) Foreign or combined courier service (such 
as NATO). 
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(3) (U) Ground transportation of SIOP-ESI material will — 

14 

he, in order of priority, by US Government sedan, US — 
Government bus, US Government chartered bus, comfflerclal — 
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transportation . 
16. (U) Actions in Case of Possible or Actual Compromise . 
The Joint Chiefs of Staff and the DSTP shall be informed by 
the most expeditious means available, consistent with 
security requirements, of any compromise or suspected 
compromise of any portion of any SIOP material. Such reports 
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will include specific identification of the document, whether 
or not SIOP-ESI is involved, and an opinion as to probability 
or possibility of compromise. The DSTP will recommend, 
appropriate actions required with regard to modification of 
the plan or related procedures as a result of the actual or 
possible compromise for consideration by the Joint Chiefs of 
Staff. The provisions of Chapter VI, DOD 5200. l-R also 
apply. 

17, (u) Machine Reproduction of SIOP-ESI . The capability of 
data reproduction by electronic means presents a special need 
for attention to security precautions where such means are 
used in processing classified material. The need is more 
pressing in instances where distribution and access must be 
strictly controlled, as in the case of SIOP-ESI material. 
Commands and agencies that possess the means for machine 
reproduction of SIOP-ESI material, or which are authorized to 
release such materials to other agencies for similar 
reproduction, shall establish suitable and adequate means for 
accounting for and controlling access to SIOP-ESI. In every 
case, such means shall ensure that numbers of copies, 
extracts, or information derivatives are limited to those 
required to serve valid needs. Access to documents and 
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reproduction equipment shall be limited to the minimum ^ 

numbers of properly cleared personnel. Accountability — 

systems shall ensure that ail documents produced by 1. 

electronic means, including AO? systems, are properly 1 

identified, marked, distributed, and safeguarded. §. 

18. (U) ADP i 

a. (U) Safeguarding SIOP-ESI in an ADP environment 1 
requires special precautions achieved by using a £ 
combination of conventional security procedures and new - 
automated techniques. Annex C delineates the minimum — 
security requirements for ADP systems. ADP systems in- 
security should include the following; H 

(1) (U) ADP hardware features. 11 

(2) (U) ADP software features. 1£ 

(3) (U) Communications security. ^ 

(4) (U) Emanations security. ^ 

(5) (U) Physical security measures. iL 

(6) (U) Personnel security measures. — 

(7) (U) Procedural safeguards (management, adminis- ^ 
trative, and operational procedures). ^ 

2 1 

b. (U) Recording media used to store or process SIOP-ESI ^ 

22 

must retain the TOP SECRET classification and be — 
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controlled as SIOP-ESI until one of the declassification i 

procedures delineated in Annex D is carried out. The 2. 

declassification procedures in Annex D apply to release of 1 

the recording media for maintenance of equipment, return i 

of parts to contractor, and release of computers to 1 

contractors. 6 

c. (U) The provisions of Annexes C and D may differ from 1 

the requirements of communications security (COMSEC) 2. 

materials and information. Refer to appropriate COMSEC - 
directives for security requirements and declassification 

procedures for COMSEC items when COMSEC and SIOP-ESI are ii 

being processed. 12 

19. (U) Destruction . As a matter of policy, in order to ii 

ensure control and minimize the possibility of compromise, il 
SIOP material will be destroyed promptly when superseded by 

new editions or when no longer required for operational use. — 

Archive copies are authorized to be established by JSTPS, as il 

prescribed by the Joint Chiefs of Staff. Officials ii 

certifying and witnessing the destruction of material ii 

containing SIOP-ESI must have authorization for access to the — 

category(ies) of SIOP-ESI contained in the material being — 

destroyed , 22 
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ANNEX A 

CATEGORIES OF SIOP- EXTREMELY SENSITIVE 
INFORMATION (SIOP-ESI) CU) 

1. (U) Scrupulous discrimination must be used when granting 
access to Categories 01, 02, 04, 09, and 10. Use of one, or 
more, of Category 03, 05, 06, 07, or 08 is preferable to 
granting access to Category 01, 02, 04, 09, or 10. Access 
categories are not meant to be a list of greater or lesser 
sensitivity or exposure; they are meant to be subject 
restrictive. The categories are intended to limit access to 
the specific area of duty responsibility. Personnel granted 
permanent or temporary access to SIOP-ESI need no further 
authorization for access to the specific categories of SIOP- 
ESI specified for a billet? however, holders of SIOP-ESI 
information must still verify a valid need-to-know before 
releasing SIOP-ESI. 

2. (U) Category numbers are unclassified. When associated 
with their definitions, they are CONFIDENTIAL. 
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ANNEX C 



1. An Automatic Data Processing System (ADPS) is defineci in 
000 Directive 7920.1 as an interacting assembly of 
procedures, processes, methods, personnel, communications, 
and automatic data processing equipment to perform a series 
of data processing operations — a combination of automatic 
data processing resources and automated data systems. This 
definition is interpreted as including all peripheral devices 
used in performing data processing operations located within 
or remote to the central ADPS facility. 

2. Authorities listed in subparagraphs 8c(l} through 8c(5) of 
the Appendix may approve the processing of data containing 
SIOP-ESI on an ADPS when operations are controlled as 
indicated below. 

a. The preferred mode of operation is the Dedicated 
Security Mode as defined by paragraph 1-211, DOD 5200. 28-M. 

"All portions of this annex are UNCLASSIFIED" 
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10 



b. In exceptional cases where the Dedicated Security Mode i 
of Operations is not reasonably practicable, the t 
System High Security Mode as defined by paragraph 1-227, i 
DOD 5200. 28-M may be used. 1 

c. Regardless of whether the Dedicated Security Mode or h 
the System High Security Mode is used, the ADPS including — 
all of its connected peripheral devices and remote Z 
terminals, must be dedicated to the processing of SIOP- — 
related and/or SIOP-ESI and be under the exclusive control 
of persons who are authorized access to SIOP-ESI. 

d. All peripheral devices in areas not manned by personnel — 

12 

cleared for SIOP-ESI must be disconnected from the ADPS by — 

13 

14 

15 
16 

17 
18 
19 
20 
21 
22 



either a manually thrown switch or by unplugging at a 
patch panel. 

3. Efficient utilization of the ADPS is important but should 
not be used as a criterion for determining the need-to-know 
and access to SIOP-GSI. 

4. Appropriate procedures will be established for debriefing 
persons not authorized access to SIOP-ESI should inadvertent 
disclosures of SIOP-GSI occur while processing under the 
modes of operation delineated In subparagraphs 2a and 2b 
above. Paragraph 16 of the Appendix will only apply in the 
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case of possible or actual compromise. ^ 



5. Requirements for ADPS containing SIOP-ESI are stated 

below: — 

a. ADPS Security Officer . A Security Officer properly — 

cleared for access to SIOP-ESI will be appointed for each i 

ADPS that will process data bases containing SIOP-ESI. 5. 

The designated approving authority (DAA) for commands — 



having operational responsibility for the ADPS will ensure 

such appointment. The responsibilities of the ADPS 
Security Officer will include: 



8 
9 

10 



(1) Ensuring that each site has written procedures that — 

12 

outline operator actions required for known fault/ — 

security events. These procedures should include — 

14 

operating restrictions, if required, and delineate — 

15 

reporting and investigation requirements. — 

16 

(2) Ensuring continued compliance with all requirements — 

17 

for processing and storing data containing SIOP-ESI — 

18 

including the requirements of this directive. — 

19 

(3) Ensuring that security deficiencies that occur in — 

20 

the operation of the ADPS are expeditiously reported to — 

21 

the command DAA. 

22 

(4) Curtailing system processing, pending investigation ~~ 
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whon coritlnueil operation coul»1 lead to compromise. 
(5) Conducting a review of audit trails £or security- 
related activities. 
Command DAAs will immediately forward to the Director for 
Operations, Joint Staff, all security deficiencies they 

consider significant and will forward annual certification i 

7 

that the system complies with all requirements for — 

8 

processing and storing data containing SIOP-ESI. If — 

9 

systems do not comply with all requirements for processing - 

and storing data containing SIOP-ESI, command DAAs will ^ 

list deficiencies and proposed corrective actions in their ^ 

12 

il 
14 

15 

ii 

17 



annual reports. 

b. Pe rsonnel Security and Access Control Measures 
(1) Unescorted access to any portion of the ADPS 
processing SIOP-ESI will be limited to personnel 
authorized access to SIOP-ESI. All other personnel 
requiring access to such areas must be escorted by 



18 

personnel authorized access to SIOP-ESI. The area will — 

19 

be inspected prior to such visits to ensure that no — 

20 

SIOP-ESI is visible. Escorts are responsible for — 

ensuring that no disclosure of SIOP-ESI occurs. — 

22 

(2) A personnel access control system will be — 
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maintained at the central site and at the remote i 
terminal areas to permit ready identification of those t 

persons authorized access to the ADPS. 

(3) A record will be maintained of all persons that are 
escorted into the areas identified in subparagraph 
5b(l) above. The ADPS Security Officer will ensure 
that this record is retained for a minimum of 12 months 
from the date of the last entry in the log. 

c. Physical Security Protection . Physical security will 

10 

be in accordance with DOD Directive 5200.1, DOD Regulation — 
5200. 1-R, DOD Directive 5200.28, and DOD Manual 5200. 28-M. 

12 

d. Communications Links . All communications links will be — 

secured in accordance with DOD Directive C-5200.5 for the — 

14 

classification of information transmitted. When — 

15 

connection is approved by the Joint Chiefs of Staff (see — 

16 

subpara<^raph 14b of the Appendix) and is connected in — 
accordance with subparagraph 5g(9) of this annex, and ADPS 

18 

that processes data containing SIOP-ESI may be conducted — 

19 

to nondedicated telecommunications systems that have been — 

20 

accredited for the transmission of SIOP-ESI (see — 

21 

subparagraph 14c of the Appendix). — 

22 

e. Emanations Security. All equipment associated with an — 
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ADPS# including remote terminals, modems, multiplexers, i 

crypto devices, patch panel, etc., that is used to process z. 

data containing SIOP-ESI must meet the objectives of DOD 1 

Directive S-5200.19. ADPS equipment processing SIOP-ESI, i 

and not previously TEMPEST tested, will be tested and 5. 

evaluated at the earliest possible date. If the ADPS ~ 

equipment is found to be deficient, appropriate counter- 1 

Q 

measures will be implemented immediately and a plan will - 

9 

be developed to phase in equipment that will meet TEMPEST - 

10 

standards at the earliest possible date. — 

f. Security Classification Responsibilities . The user Is — 

12 

responsible for verifying that no extraneous data are — 

included in his output product and that the. security — 

14 

classification indicated on the product is consistent with — 

15 

16 

17 
18 
19 

20 
21 



the data contained therein. He is also responsible for 
reporting all discrepancies. 

g. Software/Hardware Controls . The following features 

will be iraplejnented in each ADPS that is to be used to 

process data containing SIOP-ESI. Special controls will 

be implemented governing access to, and modifications of, 

these features. Where implementation of the following 

22 

features is not feasible because of equipment configuration — 
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or other legitimate reason, other compensating controls 
will be developed and approved for implementation by 
command DAA. 

( 1 ) Security Markings and Special Access Labels 

(a) All printed material produced from ADPS 
containing SIOP-ESI and operating in accordance 
with paragraph 2 above will have machine-produced 
security markings and special access labels at the 
top and bottom of each page equivalent to the 
highest classification of the data contained in the 
product. In addition, the front covers will be 
marked with a SAFEGUARD statement (see Tab). 

(b) Removable storage media; i.e., tapes, card 
decks, discs, and similar devices used to store 
data bases containing SIOP-ESI will contain TOP 
SECRET classification markings in accordance with 
DOD 5200. 1-R, with the SIOP-ESI label appropriately 
affixed to the storage media. These security 
markings/labels will be retained until the device 
is declassified by approved procedures described in 
Annex D. 
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(2) User Identification/Authentication . Operation of 
the ADPS will include a mechanism that identifies and 
authenticates user personnel accessing it remotely. 
This mechanism will consist of software and/or hardware 
devices, manual control procedures at terminal sites, 
or other appropriate measures designed to validate the 
identity and access authority of system users. 

(3) Memory Protection . System hardware and software 
features will exercise control over the addresses to 
which a user program has access. 

(4) Separation of User/Executive Modes of Operation . 
Tlie user and executive modes of an ADPS will be 
separated so that a program operating in user mode is 
prevented from performing unauthorized executive 
functions. Controls will be implemented to maintain 
continued separation of these modes. 

(5) Memory Residue Clean-Out . Measures will be 
implemented to ensure that memory residue from 
terminated user programs is made inaccessible to other 
users, niis will be accomplished as required by DOD 
5200. 28-M. 
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(6) Access Control . Effective controls will be i 
implemented to limit user and terminal access to 2 
authorized information and programs as well as to ^ 
control read and/or write capability. In addition to 4^ 
software, positive disconnection of hardware can also 5 
be used to control remote terminals. Each individual 6 
user of the system will have a unique unclassified user 7 
identification (ID) assigned. Access attempts from £ 
remote terminals will be limited to TWO attempts, after 9 
which the terminal will automatically be locked-out and 10_ 
the ADP Security Officer notified. 11^ 

(7) Audit Trail Capability . Each ADPS will produce an 12^ 
audit trail as defined in DOD 5200. 28-M containing 13^ 
sufficient information to permit a regular security L4 
review of system activity. Audit trail information 1^ 
will be controlled closely by the ADPS Security Officer 1£ 
and, since SIOP-ESI may be contained therein, should be 
marked and handled as SIOP-ESI until actual classifica- 18 
tion is determined. i2. 

(8) Changing into and out of SIOP-ESI Operations 20 
(a) Before starting to process SIOP-ESI, the area 21 

22 
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must be cleared of all unauthorized personnel and i 

unauthorized peripheral devices must be 2 

disconnected. The point of disconnect must be under 3 

the control of personnel cleared for SIOP-ESI. 4 

(b) After processing is completed, all removable 5 

storage media containing files and/or programs used g 

during SIOP-ESI processing will be disconnected 7 

from the ADPS. If any SlOP-related files or g 

programs were used and those files or programs are 9 

to be used in a non-SIOP-ESI processing environment, i£ 

they must contain no SIOP-ESI or must be purged of 11^ 

any SIOP-ESI prior to such use. AH nonremovable 12 

storage media and memory must be cleared of all V3 

SIOP-ESI. Erase and overwrite procedures 14 

delineated in Annex D apply if the ADPS is to be 15 

used in an unclassified mode. 1£ 

(9) Communication Connectivity . If an ADPS that has 17 

been approved for processing SIOP-ESI is also approved 18^ 

for interface with an external telecommunications 19^ 

system, such as AUTODIN or other telecommunication 20^ 

systems, while processing SIOP-ESI, the following 21 

22 
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additional protective features are required: i 

(a) Ail interfacing telecommunications channels 2 
will be protected by cryptographic equipment or . 3^ 
approved protective wireline distribution system. £ 

(b) Specific measures will be implemented to 5 
prevent remote programming of the ADPS via external £ 
telecommunications. 1_ 

(c) Procedures will be implemented to protect 8^ 
against accidental spillage of the data base into 9 
external telecommunications. 10^ 

(d) Procedures will be implemented for fault 11 
monitoring that will detect malfunctions and halt 12 
processing when such malfunctions degrade any 10 
protective feature. if. 

(e) Authentication procedures will be employed when 15^ 
telecommunications are used for ADPS-to-ADPS 1£ 
operations and/or ADPS-to-Remote user operations to 17 
limit access to SIOP-ESI to those network terminals 1£ 
and ADPS authorized to handle the data. 19_ 

h. Individual Security Responsibilities . All users of the 20^ 

ADPS will be briefed on the need for exercising sound 2jL 

22 
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security practices in protecting the information stored, 
processed, and produced by the system. Users will be 
informed when the system is operating in accordance with 
paragraph 2 above. Receipt of any information not specif- 
ically requested and of an unknown source shall be 
reported immediately to the ADPS Security Officer, 
i. Civilian Contractor ADP Maintenance personnel . These 
personnel will not be granted access to computer centers 
where data containing STOP-EST is resident in the ADPS 
unless the provisions of subparagraphs 8b(7) and 8b(8) of 
the Appendix have been met, 

j. Reports . When an inadvertent disclosure occurs 
involving an ADPS processing SIOP-ESI , the report required 
in paragraph 16 of the Appendix shall be expanded to 
include at a minimum: 

(1) An abstract of the problem, 

(2) The type and source (e.g.. Annex F data from disc 
pack) of the data involved, 

(3) The ADP equipment involved. 

(4) The number of people inadvertently exposed to the 
data. 
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(5) An assessment of the risk of compromise of the 
data . 

(6) Immediate action taken (e.g., system processing 
curtailed as authorized by subparagraph 5a above). 

(7) steps being taken to preclude a recurrence of the 
problem . 

(8) Comments and recommendations regarding problems 
considered to be of concern to the SIOP community and 
not restricted to the reporting site. This information 
is essential in order to determine the disclosure risk 
level of SIOP-ESI throughout the SIOP community and to 
determine whether similar problems exist on a 
community-wide basis. Reports will be submitted on an 
"as-occurring" basis. 

k. Exceptions . Requests for exceptions to the security 
measures stated above will be submitted to the Director, 
Joint Staff. 
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TAB TO ANNEX C 
SAFEGUARD STATEMENT 
♦♦SAFEGUARD** 

This ADP product was produced during a TOP SECRET SIOP- 
EST period. Handle as TOP SECRET SIOP-EST until this 
statement has been signed by an individual who is 
designated to determine that the security 
classification of this document is appropriately marked 
and that the document can assume the handling 
requirements for that classification. Report any 
unusual or unrequested output discrepancies immediately 
to: 



Signature: , Date: ii. 

ADPS Security Officer i5. 

Room Number 1$. 

Phone Number 17^ 

This ADP product has been reviewed by the undersigned. The 1£ 

correct security classification of this document is ii 

20 

21 

Signature: , Date: 22^ 
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1 

Printed /Typed Name 2 

Room Number 3^ 

Phone Number £ 
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UNCLASSIFIED 

ANNEX D 

1 

DECLASSIFICATION PROCEDURES FOR ADP MEDIA-STORING ~ 

SIOP-EXTREMELY SENSITIVE INFORMATION (SIOP-ESI) (U) 2 

^' 5££f££i* Safeguarding classified information in a 3 

computer or computer system requires special precautions 4 

because of the types of storage media and devices (magnetic 5 

drums, discs, disc packs, and tapes) used to store, record, 6 

or manipulate data that must be protected by appropriate 7 

classification and security controls until procedures in 8 

paragraph 2 below are carried out. 9 

2. Declassification . The eventual temporary or outright 10 

release of the storage device or a system including storage H 

media should be anticipated. Procedures to be used in the 12 

event a decision is made to release or deploy the storage 13 

media are as follows: 14 

a. Magnetic Tapes . Tapes used to store magnetically 15 
recorded digital data may be degaussed and declassified by 16 
erasing with approved tape degaussers that meet technical 17 
specifications promulgated by the Department of Defense. 1£ 

b. Magnetic Discs, Pics Packs, Drums, and Other Similar 19 
Rigid Magnetic Storage Devices (e.g.. Core Memory) . 20 

21 

"All portions of this annex are UNCLASSIFIED" 22 
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TOP SECRET information, except that the state must be 
changed at least 999 times. 

(2) Plated Wire Memory . Plated wire memory used to 
continuously store classified information undisturbed 
more than 8 hours may not be declassified. Such media 
will continue to retain their classification until 
physically destroyed. If the classified information is 
stored less than 8 hours and unclassified data is later 
stored for at least an equal time, the memory may be 
declassified according to the procedures for magnetic 
ferrite core memory. 

(3) Semiconductor Memory . Semiconductor memory may be 
declassified according to the procedures for magnetic 
ferrite core, except for volatile semiconductor memory. 
Volatile semiconductor memory may be declassified by 
setting "0" or "1" in all memory locations, 

e. Magnetic Storage Media Used To Store An alog, Video, or 
Similar Nondigital Information . Magnetic tape used to 
record analog, video, or similar types of nondigital 
information may be declassified by degaussing as in 
subparagraph 2a above. There is no approved overwrite 
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method for declassifying rigid magnetic storage media used 1 

for nondigital informatiori; specific guidance may be 2 

obtained as stated in paragraph 5 below. In the case of a 3^ 

failure of the tape degausser or in the absence of an £ 

approved overwrite method for rigid surfaces, a magnet may 5^ 

be used, as described in subparagraph 2c above. £ 

3. Disposition Approval . With the specific approval in each ^ 
case of the designated (systems) approving authority (DAA) 8 
within the DOD component that is responsible for the security 9 
features of the ADPS, storage media treated as above may be 10 
handled as unclassified and released as necessary. 11. 

4. Records. A record of the procedures used to declassify 12 
each storage media device shall be maintained for a period of 13. 
2 years after disposition of the media or device. 1£ 

5 . Specific Guidance 

a. Guidance for eradication of storage media not covered !§. 
above may be obtained by submission of all pertinent 1^ 
details to the Director, Joint Staff, for consideration on iS. 
a case-by-case basis. i2. 

b. In the absence of eradication by approved equipment or 2£ 

procedures or at the direction of the designated official 21^ 

22 
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responsible for the security features of the ADPS, 
ma«^netic information storage media will be safeguarded in 
the manner prescribed for the highest classification ever 
recorded thereon until it is destroyed. 
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ANNEX E 



1 



SECURITY POLICY CONCERNING TRAVEL AND ASSIGNMENT 1 
OF PERSONNEL WITH ACCESS TO SI OP- EXTREMELY 

SENSITIVE INFORMATION (SIOP-ESI) (U) 1 

' 4 

5 
6 

; 7 

; i 

I 2. 

•i 

^ 10 

s — 

i n 

I 12 

|; ii 

^ 15 

i 



ii 

16 



2. (U) Purpose . This policy is based upon the need to 
protect SIOP-ESI from possible compromise resulting from the 

18 

capture, interrogation, exploitation, or entrapment of — 

personnel who have or have had access to SIOP-ESI. — 

20 

CLASSIFIED BY DIRECTOR, J- 3 — 
DECLASSIFY ON OADR 22 
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3. (U) Definitions 2 

a. (U) STOP-EST . STOP-EST is defined in subparagraph 3b 3 

of the Appendix. 4_ 

b. (U) Hazardous Activities . Hazardous activities include 5 
assignments or visits to and travel through countries g 
listed in the Tab. Hazardous activities also include 7 
assignment or travel in combat zones or other areas where g 
hostilities are taking place, duty behind hostile lines, 9 
and duty or travel in isolated or exposed areas where iq 
individuals cannot reasonably be protected against hostile n 

action. 12^ 

c. (U) Foreign Travel Briefings . These briefings alert ^3 
traveling personnel to the potential for harassment, 14^ 
provocation, or entrapment by foreign intelligence 15 
services in overseas areas and in other environments of an j^g 
international nature, such as conferences, scientific and 
technical meetings, seminars, and symposiums. They 

examine foreign intelligence service methods of operation i£ 

and suggest precautions designed to minimize the risk of 20^ 

direct foreign intelligence exploitation of personnel 21^ 

during periods of temporary duty or leave. 22 
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d. (U) Antiterror ist Briefings , These briefings advise 2 

personnel of a variety of measures that may be employed to 3 

safeguard oneself against terrorist threats in overseas 4 

areas. 5^ 

4. (U) Policy , personnel who have detailed knowledge and g 

continuing access to STOP-EST information at Service, joint ^ 



agency, or unified and specified command level may be subject 
to travel and assignment restrictions, as determined by the 



authority granting access. 1^0 
a. (U) Official Assignment/Travel n 

(1) (U) To the extent practicable, personnel with 
detailed knowledge and continuing access to SIOP-ESI 
should not be assigned to or directed to participate in 
hazardous activities. Regardless of the degree of 

access, all personnel who havo accpss to STOP-EST must j^g 
be appropriately briefed prior to participation in any 
hazardous activity or visit as defined in subparagraph 

3b above. 19^ 

(2) (U) Prior to official visits to or travel through 20 

the countries listed in the Tab, personnel who have 2I 

access to STOP-EST must: 22 
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1 

(a) (U) Give their supporting security office 2 
advance notice of such planned travel. 3 

(b) (U) Obtain foreign travel and ant iter ror ist 4 
briefings before traveling to such countries. 5 

(c) (U) immediately contact the nearest US Consul 5 
Attache, or Embassy Regional Security Officer or 7 
post Duty Officer if detained or subjected to g 
significant harassment or provocation while 9 
traveling. 10 

(d) (U) Report to the specified official upon n 

return from travel any unusual incidents, including 12 

incidents of potential security concern, encountered 13 

during such travel. 14 

NOTE: Individuals who frequently travel, or attend or 15 
host meetings of foreign visitors of the types 

described in subparagraphs 3c above, need not be 16 

briefed for each such occasion, but shall be ~~' 

provided a thorough briefing at least once each 6- 17 
month period and a general reminder of their 

security responsibilities prior to each such 18 
activity . 

19 

b. (U) Unofficial Travel 20^ 

(1) (U) prior to unofficial visits to or travel through 21 

the countries listed in the Tab, personnel who have 22 
access to SIOP-EST must take the actions outlined in 
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subparagraph 4a (2) above; 

(2) (U) Access-granting authorities may d^ny unofficial 
travel by notifying the requester in writing of . the 
specific conditions upon which the denial is based. 

c. (u) Actions Required of Ail Persons Traveling to or 

Through Designated Countries (see Tab) « 

(1) (U) During official or unofficial visits to or 
travel through the countries listed in the Tab, persons 
who have access to SIOP-ESI MUST immediately contact 
the nearest US consular, attache, or Embassy official 
if they have been detained or subjected to significant 
harassment or provocation while traveling. 

(2) (U) Persons who have access to SIOP-ESI must be 
reminded annually of the foregoing obligations through 
security education programs. 

d. (u) Individuals With Previous Access . Persons whose 
access to SIOP-ESI is being terminated will be officially 
reminded if their obligation to ensure continued 
protection of SIOP-ESI and reminded of the risks 
associated with hazardous activities as defined herein. 
5. (u) Respons ibi 1 i t i es 



1 

2 

3 

£ 

5 

6 

7 

8 

9 

10 
11 
12 
13 

il 
15 

16 

17 
18 
19 

2£ 
21 
22 
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a. (U) The Directorate for Information and Resource - 

2 

iManagement, OJCS, will prepare and disseminate to the - 

holders of this document an updated list of countries - 

4 

(Tab) identified as posing a security risk bearing on this - 

5 

policy as changes occur. — 

b. (U) Access-granting authorities wiLL issue implementing - 

directives concerning travel and assignment of personnel — 

8 

under their cognizance. — 

9 

10 
11 

11 
13 

14 

15 

ii 

17 
18 
19 
20 
21 
22 
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TAB TO ANNEX E 



1 



COUNTRIES AND AREAS IN WHICH VISITS, TRAVEL, AND ASSIGNMENT I 
ARE CONSIDERED TO BE A HAZARDOUS ACTIVITY (U) ^ 



4 

5 
6 
7 
8 
9 

10 

U 

12 

13 

14 

15 

16 

17 
18 
19 
20 
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i« ' 
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u 
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I 

i 17 

■i- 
jil 

21 
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